Paste Rs

Paste text, Markdown, or HTML snippets to https://paste.rs and return a shareable URL. Use when the user asks to "paste"/"upload" text to paste.rs, share logs/config snippets safely as a link, or quickly publish command output without sending long messages.

Security Scan

The skill does what it says — it uploads text to paste.rs using a bundled Python script — but it saves a local .md file and uses heuristic redaction that can miss secrets, so avoid pasting sensitive data and consider cleaning up saved files.

Purpose & Capability

The name/description match the included script and docs: the bundled script posts raw text to https://paste.rs and returns the paste URL. The SKILL.md explicitly documents the behavior (including local file saving). No unrelated services, binaries, or credentials are requested.

Instruction Scope

Runtime instructions and the script stay within scope: they accept stdin/--file/--text, optionally redact common secret patterns, write a local .md file, then POST it to paste.rs. This is expected for a paste uploader, but noteworthy: the script always saves the content to disk (default /tmp) and prints the saved path to stderr. That local file is not removed by the script, which could retain sensitive data if redaction misses something.

Install Mechanism

No install spec — instruction-only skill with a bundled Python script. Nothing is downloaded or extracted at install time, and no external packages are installed by the skill.

Credentials

No environment variables, credentials, or config paths are requested. Network access is limited to the documented endpoint (https://paste.rs).

Persistence & Privilege

always is false and the skill is user-invocable. Autonomous invocation by the agent is allowed (platform default), so the agent could call this skill when it deems appropriate; combine that with the public nature of paste.rs and the script's file writes when considering automated use.

Assessment

This skill appears to do exactly what it claims: upload text to paste.rs. Before installing or using it, keep in mind: (1) Pasted content is public — do not paste secrets, personal data, or sensitive configs. (2) The bundled script saves a .md file to disk (default /tmp) and does not delete it — if your pasted content contains secrets (or redaction failed) that file may remain on disk. Consider changing --outdir to a secure location or deleting the file after upload. (3) Redaction is heuristic and imperfect; do not rely on it to guarantee secret removal. (4) If you need to paste sensitive material, prefer a different, authenticated secure store or avoid uploading entirely. Otherwise this skill is coherent and low-risk.

Quick start (preferred)

Use the bundled script (it saves a local .md file first, then uploads):

# paste from stdin
some_command | python3 skills/paste-rs/scripts/paste_rs.py

# paste a file
python3 skills/paste-rs/scripts/paste_rs.py --file ./notes.md

# paste an inline snippet
python3 skills/paste-rs/scripts/paste_rs.py --text '<h1>Hello</h1>'

# choose where the .md file is saved (default: /tmp)
python3 skills/paste-rs/scripts/paste_rs.py --outdir ./tmp-pastes --text 'hello'

Output:

• stdout: URL https://paste.rs/XXXX.md
• stderr: path saved: /tmp/paste-rs-YYYYMMDD-HHMMSS.md

Curl one-liners (fallback)

# stdin
some_command | curl -fsS https://paste.rs -d @-

# file
curl -fsS https://paste.rs -d @./file.txt

Safety notes

• Treat the pasted content as public.
• Script scripts/paste_rs.py melakukan redact otomatis by default untuk pola rahasia umum (token/apiKey/botToken/password/Authorization).
• Kalau memang butuh raw (tidak disarankan), pakai --no-redact.

Resources

• scripts/paste_rs.py: deterministic uploader (stdin / --text / --file)
• references/paste-rs-api.md: minimal API reference