From 7419bfe00d061c27dd88f3cb39f26bee937852ca Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 18:22:03 +0000 Subject: [PATCH] fix: replace unsafe pipe-to-shell installer commands with safe explicit download instructions Co-authored-by: Tcode-Motion <188012755+Tcode-Motion@users.noreply.github.com> --- .agents/skills/techscript/SKILL.md | 4 ++-- README.md | 8 ++++---- docs/getting-started/installation.md | 2 +- research/TechScript_v1.0.8_Research_Paper.md | 4 ++-- scripts/install.ps1 | 4 ++-- scripts/install.sh | 2 +- skills/techscript/SKILL.md | 4 ++-- 7 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.agents/skills/techscript/SKILL.md b/.agents/skills/techscript/SKILL.md index 2db58ca6..22f00846 100644 --- a/.agents/skills/techscript/SKILL.md +++ b/.agents/skills/techscript/SKILL.md @@ -310,12 +310,12 @@ This skill can be installed in seconds into any AI coding environment: ### Linux / macOS / Claude Code / Cursor / OpenClaw / Codex: ```bash -curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.sh | bash +curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.sh -o install.sh && bash install.sh ``` ### Windows PowerShell / Antigravity IDE / Gemini CLI / VS Code: ```powershell -irm https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.ps1 | iex +Invoke-WebRequest -Uri https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.ps1 -OutFile install.ps1; .\install.ps1 ``` --- diff --git a/README.md b/README.md index 88766b52..508900c6 100644 --- a/README.md +++ b/README.md @@ -101,12 +101,12 @@ Modern development is fragmented, bloated, and brittle: **Windows (PowerShell)** ```powershell -irm https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.ps1 | iex +Invoke-WebRequest -Uri https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.ps1 -OutFile install.ps1; .\install.ps1 ``` **Linux / macOS / Android Termux** ```bash -curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh | bash +curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh -o install.sh && bash install.sh ``` **Standalone Packages** @@ -345,8 +345,8 @@ Ships with a first-class **AI Developer Skill** ([`skills/techscript/SKILL.md`]( | Platform | Install | |----------|---------| | Google Antigravity / Agentic IDEs | Auto-loaded from [`.agents/skills/techscript/SKILL.md`](.agents/skills/techscript/SKILL.md) | -| Cursor / Claude Code / Codex (POSIX) | `curl -fsSL .../install.sh | bash` | -| Windows PowerShell | `irm .../install.ps1 | iex` | +| Cursor / Claude Code / Codex (POSIX) | `curl -fsSL .../install.sh -o install.sh && bash install.sh` | +| Windows PowerShell | `Invoke-WebRequest .../install.ps1 -OutFile install.ps1; .\install.ps1` | Full scripts: [POSIX install.sh](https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.sh) · [PowerShell install.ps1](https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.ps1) diff --git a/docs/getting-started/installation.md b/docs/getting-started/installation.md index 3ca9a104..0d691d84 100644 --- a/docs/getting-started/installation.md +++ b/docs/getting-started/installation.md @@ -52,7 +52,7 @@ cargo build --release --workspace Run the universal installer script: ```bash -curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh | bash +curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh -o install.sh && bash install.sh ``` ### Option 2: Manual Tarball Installation diff --git a/research/TechScript_v1.0.8_Research_Paper.md b/research/TechScript_v1.0.8_Research_Paper.md index 8d0105ed..f6c579aa 100644 --- a/research/TechScript_v1.0.8_Research_Paper.md +++ b/research/TechScript_v1.0.8_Research_Paper.md @@ -183,7 +183,7 @@ Requires Python 3.10+. This installs the CLI (`tech run`, `tech repl`, `tech che ```bash # One-line installer -curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh | bash +curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh -o install.sh && bash install.sh # Or, on Debian/Ubuntu: sudo apt update && sudo apt install techscript @@ -196,7 +196,7 @@ sudo apt update && sudo apt install techscript brew install tcode-motion/techscript/techscript # Or the same one-line installer used on Linux -curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh | bash +curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh -o install.sh && bash install.sh ``` ### 📱 Android (Termux) diff --git a/scripts/install.ps1 b/scripts/install.ps1 index e2cfb47b..13b6f117 100644 --- a/scripts/install.ps1 +++ b/scripts/install.ps1 @@ -1,7 +1,7 @@ # ============================================================ -# TechScript Official Windows Installer (PowerShell One-Liner) +# TechScript Official Windows Installer (PowerShell Installer) # Run with: -# irm https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.ps1 | iex +# Invoke-WebRequest -Uri https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.ps1 -OutFile install.ps1; .\install.ps1 # ============================================================ $ErrorActionPreference = "Stop" diff --git a/scripts/install.sh b/scripts/install.sh index 37c21881..88c0d5f7 100644 --- a/scripts/install.sh +++ b/scripts/install.sh @@ -2,7 +2,7 @@ # ============================================================ # TechScript v2.0.2 — Linux, macOS & Android Universal Installer # Run with: -# curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh | bash +# curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/scripts/install.sh -o install.sh && bash install.sh # ============================================================ set -e diff --git a/skills/techscript/SKILL.md b/skills/techscript/SKILL.md index 2db58ca6..22f00846 100644 --- a/skills/techscript/SKILL.md +++ b/skills/techscript/SKILL.md @@ -310,12 +310,12 @@ This skill can be installed in seconds into any AI coding environment: ### Linux / macOS / Claude Code / Cursor / OpenClaw / Codex: ```bash -curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.sh | bash +curl -fsSL https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.sh -o install.sh && bash install.sh ``` ### Windows PowerShell / Antigravity IDE / Gemini CLI / VS Code: ```powershell -irm https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.ps1 | iex +Invoke-WebRequest -Uri https://raw.githubusercontent.com/Tcode-Motion/techscript/main/skills/techscript/install.ps1 -OutFile install.ps1; .\install.ps1 ``` ---