P0 Unsafe Eval Exec banner
mahmood726-cyber mahmood726-cyber

P0 Unsafe Eval Exec

Design community

Description

<!-- sentinel:skip-file — auto-generated rule descriptor; docstring may demonstrate the bad pattern by design --> --- name: P0-unsafe-eval-exec description: 'P0-unsafe-eval-exec: BLOCK on `eval(...)` / `exec(...)` of a NON-literal argument — the canonical arbitrary-code-execution sink, and a common AI-generated-code failure mode (agents reach for eval() to "parse" or "compute" dynamic input).' trigger: commit severity: BLOCK scope: repo source: 'lessons.md#code-quality (eval/exec on dynamic inpu

Installation

Installs to ~/.claude/skills/mahmood726-cyber-sentinel-p0-unsafe-eval-exec/SKILL.md

Terminal
mkdir -p ~/.claude/skills/mahmood726-cyber-sentinel-p0-unsafe-eval-exec && curl -fsSL https://raw.githubusercontent.com/mahmood726-cyber/Sentinel/HEAD/skills/P0-unsafe-eval-exec.md -o ~/.claude/skills/mahmood726-cyber-sentinel-p0-unsafe-eval-exec/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

Full documentation available on GitHub

View Source Repository