security: fix SSRF, API key exposure, pattern bypass, symlink escapes#618

Merged

MarvelNwachukwu merged 3 commits intomainfrom

fix-ssrf-symlink-security

Mar 20, 2026

Commits on Mar 19, 2026

security: fix SSRF, API key exposure, pattern bypass, and symlink escapes
MarvelNwachukwu
committed
address PR review: simplify validatePath, add changeset, fix SKILL.md
MarvelNwachukwu
committed
fix bash pattern bypasses: versioned python binaries, node --eval
MarvelNwachukwu
committed