Paste Rs

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says—upload snippets to paste.rs—but pasted content is public and a local copy is saved first.

Install only if you are comfortable using paste.rs as a public sharing service. Before invoking it, check the exact text or file being uploaded, leave the default redaction on, do not rely on redaction as a complete secret scanner, and delete the saved local .md file if you do not want a retained copy.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If the wrong content is pasted, it may become publicly accessible through the returned link.

Why it was flagged

The script uploads the provided content to the paste.rs endpoint. This is the stated purpose, but it means any selected text, command output, or file contents are published externally.

Skill content

req = urllib.request.Request(
        PASTE_URL,
        data=saved_path.read_bytes(),
        method="POST"

Recommendation

Use it only for content intended to be shared publicly, review the content first, and keep redaction enabled unless you intentionally need raw output.

Low

#ASI06: Memory and Context Poisoning

What this means

A copy of the pasted content can remain on local disk after the public paste is created.

Why it was flagged

The skill intentionally persists a local copy of pasted content before upload and does not describe automatic deletion. This is disclosed and purpose-aligned, but users should notice the retained local file.

Skill content

Use the bundled script (it **saves a local `.md` file first**, then uploads) ... choose where the .md file is saved (default: /tmp) ... stderr: path `saved: /tmp/paste-rs-YYYYMMDD-HHMMSS.md`

Recommendation

Use a controlled output directory for sensitive workflows and delete the saved .md file after confirming the paste if you do not want a local copy retained.