sickn33 bc49ceec90 fix(security): harden skill apply and activation flows ...

Restrict auto-apply to trusted review comments so spoofed issue comments
cannot write optimized SKILL.md content into pull request branches.

Reject activation symlinks that escape the source root and add
regression coverage for both security checks.

2026-03-26 13:24:04 +01:00

7.3 KiB

Raw Permalink Blame History

View Raw