원클릭으로 Manus에서 모든 스킬 실행

시작하기

local-ipc-auth

스타2

포크3

업데이트2026년 5월 3일 00:24

Review pattern for local socket auth without trusting spoofable protocol identity

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

quaid-app

quaid-app/quaid

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Pattern

For local IPC that forwards privileged writes, treat kernel-backed peer credentials as the authority and treat protocol identity (whoami, session id, socket-path token) as a cross-check only.

Use when

A CLI talks to a local daemon over a Unix socket.
The daemon exposes write-capable operations.
A same-UID spoofing race is plausible.

Requirements

Publish the endpoint only after bind + permission audit succeed.
Clear any published endpoint metadata and unlink the socket on shutdown/startup-abort so clients cannot chase stale coordinates.
Client verifies socket owner/mode before connect.
Client verifies kernel peer UID/PID after connect against the expected process.
Server verifies peer UID on every accept.
If auth/setup fails while a live owner exists, refuse; do not fall back to an unsafe direct path.

Anti-patterns

Trusting whoami or session id as the primary auth primitive.
Trusting the socket path alone.
Falling back to direct writes when the proxy channel is unavailable.
Blocking the daemon's main supervision loop on socket I/O.

이 저장소의 다른 Skills

같은 저장소

quaid-research

quaid-app/quaid

Resolve knowledge gaps: fetch unresolved gaps, assess sensitivity, generate research queries, ingest findings, and close gaps with a resolution slug.

2026-06-132

quaid-alerts

quaid-app/quaid

Interrupt-driven alerts: detect and surface new contradictions, stale pages, resolved gaps, and embedding drift. Priority-classified with deduplication.

2026-06-132

quaid-ingest

quaid-app/quaid

Ingest meeting notes, articles, documents, and conversations into Quaid. Handles idempotent ingestion for exact-byte duplicates and vault-backed sync.

2026-06-132

quaid-maintain

quaid-app/quaid

Keep the brain healthy: detect and resolve contradictions via the correction / supersede workflow, validate referential integrity, triage knowledge gaps, find orphaned pages, and compact the database.

2026-06-132

quaid-query

quaid-app/quaid

Answer questions from the brain using FTS5 + semantic search + structured queries. Synthesize across multiple pages. Cite sources.

2026-06-132

quaid-upgrade

quaid-app/quaid

Agent-guided binary upgrades: version check, channel detection, download via install.sh (or manual asset fetch + SHA-256 verify), and post-upgrade validation.

2026-06-132

name	local-ipc-auth
description	Review pattern for local socket auth without trusting spoofable protocol identity
domain	security
confidence	high
source	extracted

Pattern

Use when

A CLI talks to a local daemon over a Unix socket.
The daemon exposes write-capable operations.
A same-UID spoofing race is plausible.

Requirements

Publish the endpoint only after bind + permission audit succeed.
Clear any published endpoint metadata and unlink the socket on shutdown/startup-abort so clients cannot chase stale coordinates.
Client verifies socket owner/mode before connect.
Client verifies kernel peer UID/PID after connect against the expected process.
Server verifies peer UID on every accept.
If auth/setup fails while a live owner exists, refuse; do not fall back to an unsafe direct path.

Anti-patterns

Trusting whoami or session id as the primary auth primitive.
Trusting the socket path alone.
Falling back to direct writes when the proxy channel is unavailable.
Blocking the daemon's main supervision loop on socket I/O.