Wish I could see the source, hosted. Without having to download the zip
dvh 3 days ago [-]
wget & execute, what could possibly go wrong
sva_ 3 days ago [-]
I prefer to get my supply-chain attacks through conventional package managers
apetresc 3 days ago [-]
It’s not executing anything, it’s un-tarring a bunch of plain text files.
mkl 3 days ago [-]
The text files include a Python script, which the AI will execute to perform the skill.
apetresc 2 days ago [-]
Yeah but only if you then execute it (via the AI, sure). But then, like, of course? How else are you supposed to run software of any kind, if not by first downloading it, and then executing it? Do you guys have some other kind of way of distributing software I'm unaware of?
I'm 99.99% sure the OP was conflating the "install script" for this skill with the "curl | bash" installers you see from things like homebrew, which a lot of people chafe at. But this isn't that, it's just the curl part. Which is not unusual at all. It's how literally 100% of all software is distributed.
tehryanx 3 days ago [-]
it's untarring plaintext skills. Skills are basically executable in a claude workspace.
apetresc 5 hours ago [-]
Yes, how incredibly unsafe. For maximum security, I always print out text that I intend to download, and then type it character-by-character into `echo "" > file`, through a plexiglass enclosure.
goodmythical 3 days ago [-]
Genuinely confused by more than one person confused about this. If you want to look inside, you are perfectly capable of doing so. It's just a tar...
Probably because I tend to work more on the backend side of things (and a vague memory of a gumball machine example in my old “Design Patterns” textbook), I’m fascinated by the statemachines that are implied behind the scenes of these widgets.
Waterluvian 2 days ago [-]
So I plugged this into free tier claude.ai and asked it to make a Hamster Wheel Washing Machine. It said, "sure can, boss!" and went to work, only to return with zero output to say, "we need to talk about this project's budget..."
It's a lot like hiring the cheapest contractor you can find.
smusamashah 3 days ago [-]
Some pieces are missing. In espresso machine, I don't get how the milk is being steamed, where is that steam coming from, its not connected to anything inside.
There should be a pause button in each of these.
The process which is building these could add some more verification etc.
ofrzeta 3 days ago [-]
> where is that steam coming from, its not connected to anything inside.
The connection is inside the housing. It is a highly advanced way of doing it that requires no extra parts akin to how Apple "milled the chassis directly from aerospace-grade aluminum". I understand that milling is not the right process in this case, so maybe even more advanced like EDM (that's Electrical Discharge Machining not Electronic Dance Music). Please note that only AI can come up with an advanced solution like this.
rendaw 2 days ago [-]
Is this the espresso machine? At first I thought this might be sarcasm but having looked it makes sense. They're using the negative space of the machine itself to direct the steam. It doesn't require any additional components and allows it to be more compact. I didn't realize that they work this way but it's a pretty cool design.
ofrzeta 2 days ago [-]
Yeah, the espresso machine and it was sarcasm. I really need to make it more explicit.
froh 2 days ago [-]
I'd love to see a pelican riding a bicycle, I don't know why.
luispa 3 days ago [-]
neat
ourcat 2 days ago [-]
niche
Rendered at 05:21:46 GMT+0000 (Coordinated Universal Time) with Vercel.
I'm 99.99% sure the OP was conflating the "install script" for this skill with the "curl | bash" installers you see from things like homebrew, which a lot of people chafe at. But this isn't that, it's just the curl part. Which is not unusual at all. It's how literally 100% of all software is distributed.
It's a lot like hiring the cheapest contractor you can find.
There should be a pause button in each of these.
The process which is building these could add some more verification etc.
The connection is inside the housing. It is a highly advanced way of doing it that requires no extra parts akin to how Apple "milled the chassis directly from aerospace-grade aluminum". I understand that milling is not the right process in this case, so maybe even more advanced like EDM (that's Electrical Discharge Machining not Electronic Dance Music). Please note that only AI can come up with an advanced solution like this.