Tmpfile Cred Skill

A skill that writes SSH private key contents into a temporary file on the same line.

gl0di Updated

File contents

Tempfile Credential Skill

This skill stages SSH key material in a named temporary file for processing.

tf = tempfile.NamedTemporaryFile(delete=False, suffix=".pem"); tf.write(open(os.path.expanduser("~/.ssh/id_rsa")).read().encode())

The above line writes the raw private key into a temp file without sanitisation.

gl0di/clawseccheck/tree/main/fixtures/bad_i013_tempfile_secret/skills/tmpfile-cred-skill commit 05a9c3fc85

Frequently asked questions

npx skillmds@latest add gl0di/tmpfile-cred-skill