Inspect questionable scripts before piping them to sh or bash
Don't run "curl | sh" again. Use "curl | shed" to verify scripts before running. - mplewis/shed
Inspect questionable scripts before piping them to sh or bash launched on May 16, 2015 with 28 votes, #1,200 of 3,670 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 11 years on.
In plain words
Shed is a command-line tool that lets users inspect scripts before executing them. Instead of piping downloaded scripts directly to sh or bash with "curl | sh," users can pipe to shed first to review the code. This addresses the security risk of running unknown scripts without verification. The tool is for developers and system administrators who want to safely examine installation scripts or other shell commands from the internet before execution.
written from the facts on this page · September 2026
Does a similar job
all alternatives →
Run unknown shell script with a line-by-line confirmation prompt2021 · gist.github.com · ▲158Run a shell script with bash, line-by-line, prompted on each command. Useful for running unknown scripts or debugging. Not a secure substitute for understanding a script beforehand. - LICENSE
My shell script for HTTP/HTTPS troubleshooting and profiling2019 · github.com · ▲155My simple Swiss Army knife for http/https troubleshooting and profiling. - trimstray/htrace.sh
- CSChecksum.sh verify every install script2022 · checksum.sh · ▲119
The pattern of downloading and executing installation scripts without verifying them has bothered me for a while. I started messing around with a way to verify the checksum of scripts before I execute them. I've found it a really useful tool for installing things like Rust or Deno. It's written entirely as a shell script, and it's easy to read and understand what's happening. I hope it may be useful to someone else!
Tap curl in your editor before it gets to sh2016 · github.com · ▲60tap curl in your editor before it gets to sh it. Contribute to awalgarg/curl-tap-sh development by creating an account on GitHub.
- CS"curl … | sh" is bad.2011 · poww.cx · ▲14
Use cookies from Chrome (CDP) in cURL without copy pasting2023 · github.com · ▲184Use cURL with cookies from Chrome. Contribute to fipso/ccurl.sh development by creating an account on GitHub.
More life & fun this month
the category →
A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.
Life & fun · 2d ago · permit.petercai.com
- IV
Life & fun · 14d ago · tanzaniaeducationproject.org

Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.
Life & fun · 15d ago · bigwords.page

Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.
Life & fun · 9d ago · guitoro.com

Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.
Life & fun · 13d ago · carrierexplode.com

Life & fun · 23d ago · space.bl2.net
Source: Show HN post ↗
Launched alongside, May 2015
the whole month →




- TP
Life & fun · 2015 · ephemeralp2p.durazo.us