sickn33 bc49ceec90 fix(security): harden skill apply and activation flows ...

Restrict auto-apply to trusted review comments so spoofed issue comments
cannot write optimized SKILL.md content into pull request branches.

Reject activation symlinks that escape the source root and add
regression coverage for both security checks.

2026-03-26 13:24:04 +01:00

..

tests

fix(security): harden skill apply and activation flows

2026-03-26 13:24:04 +01:00

_project_paths.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

_safe_files.py

fix(security): Harden skill tooling file handling

2026-03-21 11:50:16 +01:00

analyze_voltagent_repo.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

apply_skill_optimization.cjs

fix(security): harden skill apply and activation flows

2026-03-26 13:24:04 +01:00

audit_consistency.py

feat(repo): Add contributor sync and consistency audits

2026-03-21 10:48:00 +01:00

audit_skills.py

meta(skills): Add skill audit and safe metadata fixes

2026-03-20 09:06:45 +01:00

auto_categorize_skills.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

build-catalog.js

meta(bundles): Add vertical starter and generated packs

2026-03-19 18:39:12 +01:00

check_html_content.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

check_stale_claims.py

feat(repo): Add contributor sync and consistency audits

2026-03-21 10:48:00 +01:00

check_validation_warning_budget.py

feat(repo): Add warning budget and maintainer audit

2026-03-21 11:08:57 +01:00

cleanup_synthetic_skill_sections.py

fix(security): Harden skill tooling file handling

2026-03-21 11:50:16 +01:00

convert_html_to_markdown.py

fix(security): Address remaining scanning alerts

2026-03-18 18:15:49 +01:00

copy-file.js

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

fix_dangling_links.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

fix_missing_skill_metadata.py

fix(security): Harden skill tooling file handling

2026-03-21 11:50:16 +01:00

fix_missing_skill_sections.py

fix(security): Harden skill tooling file handling

2026-03-21 11:50:16 +01:00

fix_skills_metadata.py

fix: harden filesystem trust boundaries

2026-03-15 08:39:22 +01:00

fix_truncated_descriptions.py

fix(security): Harden skill tooling file handling

2026-03-21 11:50:16 +01:00

fix_yaml_quotes.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

fix_year_2025_to_2026.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

generate_index.py

meta(index): Curate remaining skill categories

2026-03-20 10:23:34 +01:00

generate_skills_report.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

generated_files.js

fix: streamline pr and release workflow (#289)

2026-03-13 14:20:49 +01:00

get-bundle-skills.py

Activation skills (#358)

2026-03-19 16:43:55 +01:00

implement_voltagent_skills.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

maintainer_audit.py

feat(repo): Add warning budget and maintainer audit

2026-03-21 11:08:57 +01:00

manage_skill_dates.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

normalize-frontmatter.js

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

pr_preflight.cjs

feat(infra): standardize ESM root and harden security audit pipeline (#363)

2026-03-20 18:05:56 +01:00

release_cycle.sh

fix: streamline pr and release workflow (#289)

2026-03-13 14:20:49 +01:00

release_workflow.js

fix(release): Restore web-app install for npm publish

2026-03-23 19:13:30 +01:00

repair_description_usage_summaries.py

fix(skills): Restore actionable skill descriptions

2026-03-20 17:56:13 +01:00

run-python.js

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

setup_web.js

fix(web-app): Sync backup skills catalog

2026-03-20 09:44:34 +01:00

skills_manager.py

fix: harden filesystem trust boundaries

2026-03-15 08:39:22 +01:00

sync_contributors.py

feat(repo): Add contributor sync and consistency audits

2026-03-21 10:48:00 +01:00

sync_microsoft_skills.py

fix(security): Harden skill activation and loading flows

2026-03-18 18:49:15 +01:00

sync_recommended_skills.sh

fix(security): Harden skill activation and loading flows

2026-03-18 18:49:15 +01:00

sync_repo_metadata.py

fix(security): Harden skill tooling file handling

2026-03-21 11:50:16 +01:00

update_readme.py

fix(readme): Sync star badge and milestone text

2026-03-21 10:25:34 +01:00

validate_references.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

validate_skills.py

feat(repo): Add warning budget and maintainer audit

2026-03-21 11:08:57 +01:00

validate_voltagent_sources.py

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00

validate-skills.js

refactor: reorganize repo docs and tooling layout

2026-03-06 15:01:38 +01:00