6 Commits

Author	SHA1	Message	Date
sickn33	b1bf63d0bc	build(vite): Bump Vite to 7.3.2 ... Update the web app and Loki example frontend to the patched Vite release and regenerate the derived Claude plugin package files. This aligns the affected manifests with the current Dependabot fix.	2026-04-06 21:12:09 +02:00
sickn33	b681e0e03b	fix(security): Harden skill security checks	2026-03-28 17:37:29 +01:00
sickn33	344854e9e5	fix(security): Address remaining scanning alerts ... Tighten the remaining high-signal security findings by switching the todo example to a standard Express rate limiter, removing sensitive metadata from boilerplate logging, and replacing fragile HTML tag filtering with parser-based conversion. Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-18 18:15:49 +01:00
sickn33	3b6ef3add8	fix(security): Remediate scanning and dependency alerts ... Harden template and example code paths, redact sensitive output, and pin safe transitive npm packages. Consolidate the todo backend on better-sqlite3 so the example no longer pulls the vulnerable sqlite3 chain and still passes build and CRUD smoke checks. Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-18 18:05:45 +01:00
sck_0	27cb7c6830	chore: clean misplaced repo artifacts	2026-03-14 20:00:09 +01:00
sck_0	8bd204708b	Fix: Ensure all skills are tracked as files, not submodules	2026-01-14 18:48:48 +01:00