Affaan Mustafa a62a3a2416 fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests ... Validate args parameter in getExecCommand() against SAFE_ARGS_REGEX to prevent command injection when returned string is passed to a shell. Escape regex metacharacters in getCommandPattern() generic action branch to prevent malformed patterns and unintended matching. Clean up stdin listeners in readStdinJson() timeout path to prevent process hanging.		2026-02-13 02:27:04 -08:00
..
ci	fix: reject whitespace-only command/field values in CI validators, add 10 tests	2026-02-13 02:09:22 -08:00
hooks	fix: eliminate command injection in hooks, fix pass-through newline corruption, add 8 tests	2026-02-13 02:22:55 -08:00
lib	fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests	2026-02-13 02:27:04 -08:00
release.sh	fix: harden CI validators, shell scripts, and expand test suite	2026-02-12 14:11:33 -08:00
setup-package-manager.js	fix: resolve ESLint errors and update tests for project-name fallback	2026-01-29 02:58:51 -08:00
skill-create-output.js	fix: clamp progressBar to prevent RangeError on overflow, add 10 tests	2026-02-13 02:01:57 -08:00