Garry Tan 5645839186 security: path traversal prevention for screenshot/pdf/eval (PR #26) ...

Add validateOutputPath() for screenshot/pdf/responsive (restricts to
/tmp and cwd) and validateReadPath() for eval (blocks .. sequences and
absolute paths outside safe dirs). 7 new tests.

Credit: Jah-yee (PR #26)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-12 20:28:54 -07:00

..

bin

Phase 3: /qa skill — systematic QA testing with health scores

2026-03-12 13:34:06 -07:00

src

security: path traversal prevention for screenshot/pdf/eval (PR #26)

2026-03-12 20:28:54 -07:00

test

security: redact sensitive values from command output (PR #21)

2026-03-12 20:28:48 -07:00

SKILL.md

Phase 2: Rewrite SKILL.md as QA playbook + command reference

2026-03-12 13:33:54 -07:00