2 Commits

Author	SHA1	Message	Date
sickn33	bc49ceec90	fix(security): harden skill apply and activation flows ... Restrict auto-apply to trusted review comments so spoofed issue comments cannot write optimized SKILL.md content into pull request branches. Reject activation symlinks that escape the source root and add regression coverage for both security checks.	2026-03-26 13:24:04 +01:00
sickn33	0afb519bb3	fix(actions): isolate apply-optimize from issue comments	2026-03-25 12:05:50 +01:00