mirror of
https://github.com/mattpocock/skills.git
synced 2026-09-12 10:28:06 +07:00
Matt PocockandClaude Opus 5
efce423018
A Snyk audit (W007, HIGH) flagged the skill for insecure credential handling: it tells the agent to "paste the invocation and its output", builds curl loops, and collects artifacts — three paths by which a live token can end up reproduced in the agent's response. Add a Redact section making redaction the first move on each, and point the two call sites at it. Warn in the HITL template that `capture` prints its value back to the terminal, where the agent reads it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
760 B
760 B
mattpocock-skills
| mattpocock-skills |
|---|
| patch |
Make diagnosing-bugs redact secrets.
- Add a Redact section to
SKILL.md. The skill has the agent show commands, outputs and captured artifacts; the section makes redaction the first move on each — write<REDACTED>, show a command's shape (Bearer $API_TOKEN) rather than its credential, build loops against env vars, and redact HAR files, log dumps and payloads before quoting them. - The Phase 1 completion criterion said "paste the invocation and its output". It now says show it redacted, and Phase 1 asks the user for a redacted captured artifact.
- Note in
scripts/hitl-loop.template.shthatcaptureprints its value back to the terminal, so it takes observations while signing in stays astep.