Automated research artifact — not the upstream project.

This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of skim-rs/skim at commit ca986f444c37d2c1dc15ce1fad2fe101776af8d9 (2026-04-14), redistributed under that project's own licence, whose file is included unchanged in this snapshot.

The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-04-14; see pinning.md in the harness output for every change made to the snapshot.

Questions or objections: [email protected]

---

Life is short, skim!

We spend so much of our time navigating through files, lines, and commands. That's where Skim comes in! It's a powerful fuzzy finder designed to make your workflow faster and more efficient.

Skim provides a single executable called sk. Think of it as a smarter alternative to tools like grep - once you try it, you'll wonder how you ever lived without it!

Table of contents

• Installation
  • Package Managers
  • Manually
• Usage
  • As Vim plugin
  • As filter
  • As Interactive Interface
  • Shell Bindings
  • Key Bindings
  • Search Syntax
  • exit code
• Tools compatible with skim
  • fzf-lua neovim plugin
  • nu_plugin_skim
• Customization
  • Keymap
  • Sort Criteria
  • Color Scheme
  • Misc
• Advanced Topics
  • Interactive mode
    • How does it work?
  • Executing external programs
  • Algorithms
  • Preview Window
    • How does it work?
  • Fields support
  • Use as a library
  • Benchmarks
• FAQ
  • How to ignore files?
  • Some files are not shown in Vim plugin
• Differences from fzf
• How to contribute
  • Windows compatibility testing
• Troubleshooting
  • No line feed issues with nix, FreeBSD, termux

Installation

The skim project contains several components:

1. sk executable - the core program
2. Vim/Nvim plugin - to call sk inside Vim/Nvim. Check skim.vim for Vim support.

Package Managers

OS	Package Manager	Command
macOS	Homebrew	brew install sk
macOS	MacPorts	sudo port install skim
Alpine	apk	apk add skim
Arch	pacman	pacman -S skim
Fedora	COPR	see below
Gentoo	Portage	emerge --ask app-misc/skim
Guix	guix	guix install skim
Void	XBPS	xbps-install -S skim

Fedora

Up to date Fedora packages are provided via an unofficial community-maintained COPR repository.

sudo dnf copr enable sisyphus1813/skim
sudo dnf install skim

Manually

Any of the following applies:

• Using the install script:

  # Always check the content of the script before running it !
  $ curl --proto '=https' --tlsv1.2 -LsSf https://github.com/skim-rs/skim/releases/latest/download/skim-installer.sh | sh
  

• Using Binary: Simply download the sk executable directly.
• Install from crates.io: cargo install skim
• Build Manually:

  $ git clone --depth 1 [email protected]:skim-rs/skim.git ~/.skim
  $ cd ~/.skim
  $ cargo build --release
  $ # Add the resulting `target/release/sk` executable to your PATH
  

You will then have access to:

• The man page, which you can either write to the correct path or run man --local-file <(sk --man)
• The shell completions (and optional keybinds), using source <(sk --shell \<shell> \[--shell-bindings]), see below for details

Usage

Skim can be used either as a general filter (similar to grep) or as an interactive interface for running commands.

As Vim plugin (on neovim, checkout fzf-lua with the skim profile)

Via vim-plug (recommended):

Install skim, then :

Plug 'skim-rs/skim'

As filter

Here are some examples to get you started:

# directly invoke skim
sk

# Or pipe some input to it (press TAB key to select multiple items when -m is enabled)
vim $(find . -name "*.rs" | sk -m)

This last command lets you select files with the ".rs" extension and opens your selections in Vim - a great time-saver for developers!

As Interactive Interface

skim can invoke other commands dynamically. Normally you would want to integrate it with grep, ack, ag, or rg for searching contents in a project directory:

# works with grep
sk --ansi -i -c 'grep -rI --color=always --line-number {q} .'
# works with ack
sk --ansi -i -c 'ack --color {q}'
# works with ag
sk --ansi -i -c 'ag --color {q}'
# works with rg
sk --ansi -i -c 'rg --color=always --line-number {q}'