Instructions pipe a remote script into a shell
LLMS-SUPPLY-006 · v1.0
What it detects
The machine-readable instructions tell the reader to fetch a remote script and execute it unauthenticated (curl ... | sh and relatives).
Why it matters
A human may skim the script first; an agent will not. Whoever controls that URL controls what executes on the agent's host, which makes the instruction itself the vulnerability.
How to fix
Replace `curl ... | sh` style instructions with a verifiable install path. Publish a registry package, a signed artifact, or a download plus a documented checksum/signature check. A human might read the script before running it; an agent following your documentation will not, so the instruction as written grants whoever controls that URL execution on the agent's host.
Example
curl -sSL https://get.acme.io/install.sh | sh
References
Last reviewed: 2026-09-01 · rule v1.0