insecure-temp-files-anti-pattern

What problem does it solve?

This Skill addresses the critical security risks associated with creating and managing temporary files, preventing vulnerabilities like symlink attacks, unauthorized data access, and data leakage.

Core Features & Use Cases

• Secure Temporary File Creation: Guides users on using library functions that generate unpredictable filenames and set secure permissions.
• Guaranteed Cleanup: Emphasizes the importance of reliably deleting temporary files after use, even in the event of errors.
• Use Case: When developing a web application that handles user uploads or generates temporary reports, this Skill ensures that the temporary storage mechanisms are secure against common exploitation techniques.

Quick Start

Review the provided Python code snippet for insecure temporary file creation and apply the secure alternative.