zeroclaw/src/skills
Argenis 641a5bf917
fix(skills): prevent path traversal in skill remove command
- Fix URL validation to check for https:// or http:// prefixes instead of partial string matching which could be bypassed
- Add path traversal protection in skill remove command to reject .., /, and verify canonical path is inside the skills directory
2026-02-15 08:15:41 -05:00
..
mod.rs fix(skills): prevent path traversal in skill remove command 2026-02-15 08:15:41 -05:00
symlink_tests.rs feat: integrate open-skills library and cleanup clippy warnings 2026-02-14 20:25:07 -05:00