Daoyuan Li 0cd55067f3

fix(skills): reject colon in zip member names to close NTFS ADS smuggling gap (#4236) ...

Neither is_unsafe_zip_member (installer.py) nor its duplicated check in
skillscan/orchestrator.py rejected a colon in a zip member name. On
Windows/NTFS, a name like scripts/run.sh:hidden.txt addresses an
Alternate Data Stream on run.sh instead of creating a new file, so the
hidden content is invisible to Path.rglob()/os.walk()-based scanning in
both the deterministic static scanner and the extracted-file content
scanner, while still landing genuinely on disk. Reject any colon in a
zip member's relative path outright in both files; a colon has no
legitimate use there since zip entries use forward slashes and a real
Windows drive prefix is already caught by the existing absolute-path
check.

2026-07-19 22:36:15 +08:00

..

harness

fix(skills): reject colon in zip member names to close NTFS ADS smuggling gap (#4236)

2026-07-19 22:36:15 +08:00