trailofbits/skills

    """Contents of `rel_path` at `ref`, or None when it did not exist there."""
    result = subprocess.run(
        ["git", "show", f"{ref}:{rel_path}"],
        cwd=repo_root,

def _bash(script: str, cwd: Path) -> subprocess.CompletedProcess[str]:
    return subprocess.run(
        ["bash", "-c", f'. "{BUILD_LOG}"\n{script}'],
        cwd=cwd,

    try:
        compile(body, "<embedded>", "exec")
    except SyntaxError as error:
        pytest.fail(f"{origin} embeds Python that does not parse: {error}\n{body}")

        cleaned = re.sub(r"<[A-Za-z0-9_ .-]+>", "PLACEHOLDER", source)
        result = subprocess.run(["bash", "-n"], input=cleaned, capture_output=True, text=True)
        if result.returncode != 0:...

fn wipe_secret(key: &mut SecretKey) {
    unsafe { ptr::write_bytes(key as *mut SecretKey, 0, 1); }
}

        # Unpredictable timing
        "eval": "eval() has unpredictable timing characteristics",
        # Predictable randomness
        "math.random": "Math.random() is predictable; use crypto.getR...

        # Unpredictable timing
        "eval": "eval() has unpredictable timing characteristics",
        # Predictable randomness
        "math.random": "Math.random() is predictable; use crypto.getR...

    for i in 0..len {
        unsafe {
            if *received_tag.add(i) != *computed_tag.add(i) {
                return 0;

  const body = src.replace(/^export const meta/m, "const meta");
  return new Function(
    "agent",
    "parallel",

function load(name, ...preamble) {
  return new Function(`${preamble.join('\n')}\n${extract(name)}\nreturn ${name}`)()
}

  const body = src.replace(/^export const meta/m, "const meta");
  return new Function("agent", "parallel", "phase", "log", "args", `return (async () => {\n${body}\n})()`);
}