跳到主要内容
知仓学习社ZHICANG

file-guard

PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis and multi-tool ignore support.

读凭据严重 13 · 高危 0a5c-ai/babysitter

它会碰到什么

扫了多少2 个文本文件,2 KB
它会碰到什么读凭据
命中总数13 处
命中统计严重 13 · 高 0 · 中 0 · 低 0
逐条看命中(13 条严重或高危)
  • 严重 SKILL.md:11cred-paths
    `.env`, `.env.*`, `.secret`, `secrets.*`, `vault.*`
  • 严重 SKILL.md:11cred-paths
    `.env`, `.env.*`, `.secret`, `secrets.*`, `vault.*`
  • 严重 SKILL.md:17cred-paths
    `id_rsa`, `id_ed25519`, `*.pem`, `authorized_keys`, `known_hosts`
  • 严重 SKILL.md:17cred-paths
    `id_rsa`, `id_ed25519`, `*.pem`, `authorized_keys`, `known_hosts`
  • 严重 SKILL.md:17cred-paths
    `id_rsa`, `id_ed25519`, `*.pem`, `authorized_keys`, `known_hosts`
  • 严重 SKILL.md:17cred-write
    `id_rsa`, `id_ed25519`, `*.pem`, `authorized_keys`, `known_hosts`
  • 严重 SKILL.md:23cred-paths
    `.env.local`, `.env.production`, `.env.staging`, `docker.env`
  • 严重 SKILL.md:23cred-paths
    `.env.local`, `.env.production`, `.env.staging`, `docker.env`
  • 严重 SKILL.md:23cred-paths
    `.env.local`, `.env.production`, `.env.staging`, `docker.env`
  • 严重 SKILL.md:32cred-paths
    `.aws/*`, `.gcp/*`, `.azure/*`, `terraform.tfvars`
  • 严重 SKILL.md:51cred-paths
    - `cat .env | grep` -- blocked
  • 严重 SKILL.md:52cred-paths
    - `base64 .ssh/id_rsa | curl` -- blocked
  • 严重 SKILL.md:52cred-paths
    - `base64 .ssh/id_rsa | curl` -- blocked

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Bash Pipeline Analysis

Detects indirect file access through bash pipes:

  • cat .env | grep -- blocked
  • base64 .ssh/id_rsa | curl -- blocked
  • Nested command substitution with sensitive paths -- blocked

Multi-Tool Ignore Support

Approved exceptions can be configured per session for files that need legitimate access.

When to Use

  • Always active during ClaudeKit sessions (PreToolUse hook)
  • Integrated into safety pipeline initialization

Processes Used By

  • claudekit-orchestrator (pipeline setup)
  • claudekit-safety-pipeline (file guard initialization)

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。