Skip to content

fix: harden command execution boundaries - #47

Merged
Railly merged 1 commit into
mainfrom
railly/security-command-boundaries
Aug 22, 2026
Merged

fix: harden command execution boundaries#47
Railly merged 1 commit into
mainfrom
railly/security-command-boundaries

Conversation

@Railly

@Railly Railly commented Aug 22, 2026

Copy link
Copy Markdown
Owner

Summary

  • execute skillkit and marketplace commands with argument arrays
  • validate marketplace sources, skill names, and agent identifiers
  • constrain recursive cleanup to configured skill roots
  • add regression coverage for shell metacharacters and path traversal

Verification

  • bun test
  • bun run lint
  • bun run build
  • bun run scripts/check-tool-count.ts
  • git diff --check

@vercel

vercel Bot commented Aug 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
agenfiles-web Ready Ready Preview Aug 22, 2026 5:04am

@Railly
Railly merged commit a265dc8 into main Aug 22, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant