keybase / keybase/keybase-issues
"keybase execute": replacement command for 'curl | sh'
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
I would really like to be able to tell someone to run the command
```
keybase execute glyph https://glyph.im/some-code.sh
```
to replace telling them to pipe the output of `curl` to the output of `sh`.
The present UI for doing this is insufficient, because `keybase verify` doesn't un-base-64 its input and `keybase decrypt` happily outputs unverified data before it ultimately fails, which doesn't help in the `|sh` pipeline.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the existing keybase verify and keybase decrypt command behavior described in the issue, then identify the command entry point for a new keybase execute operation. Done means a remote script can be decoded, verified, and executed without piping curl output directly to sh, while unverified data is not sent to the shell.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell
- Domain
- cli
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100