Garry Tanandcapy-ai[bot] 0dbc60708e fix(make-pdf): read local images only from the document's directory, and only image files (GST-1747) (#4113) ...

* fix(make-pdf): read local images only from the document's directory, and only image files (GST-1747)

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

* fix(make-pdf): inline a local file only when its bytes match its image format

A file with an image extension now needs that format's signature (or a recognized size header) before it is inlined; anything else gets the blocked placeholder, and --strict throws. The docx ICNS test now sees the local file blocked by the prepass and the inline data URI dropped by the docx guard.

Review-Finding: p1/specialist-batched#1 reader=security
Review-Finding: p1/specialist-batched#2 reader=testing
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

* fix(make-pdf): compare image paths with path.relative so a root-level document keeps its images

A markdown file at the filesystem root made the containment prefix '//' (or 'C:\\'), which no path matched.

Review-Finding: v1/adversarial-native#5 reader=adversarial-native
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

---------

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

2026-11-07 06:53:27 +00:00

..

src

fix(make-pdf): read local images only from the document's directory, and only image files (GST-1747) (#4113)

2026-11-07 06:53:27 +00:00

test

fix(make-pdf): read local images only from the document's directory, and only image files (GST-1747) (#4113)

2026-11-07 06:53:27 +00:00

SKILL.md

fix(make-pdf): read local images only from the document's directory, and only image files (GST-1747) (#4113)

2026-11-07 06:53:27 +00:00

SKILL.md.tmpl

fix(make-pdf): read local images only from the document's directory, and only image files (GST-1747) (#4113)

2026-11-07 06:53:27 +00:00