Aari 317577e285

fix: enforce custom agent skill allowlists in sandboxes (#5077) ...

* fix: enforce agent skill allowlists in sandboxes

* fix: guard E2B skill projection resets

* fix: preserve agent skill isolation across delegation

* fix: close sandbox skill isolation bypasses

* fix(sandbox): close skill isolation review gaps

* fix(sandbox): harden skill isolation lifecycle

2026-08-31 14:35:08 +08:00

..

review

fix(skills): safely tokenize portable allowed-tools patterns (#4984)

2026-08-28 08:58:59 +08:00

skillscan

test(skillscan): document known instance-client false negatives from #4296 (#4644)

2026-08-03 17:17:01 +08:00

storage

fix(skills): refresh user storage after config reload (#4972)

2026-08-25 19:46:04 +08:00

__init__.py

feat(skills): deferred skill discovery via describe_skill tool (#3775)

2026-07-04 23:09:29 +08:00

AGENTS.md

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

catalog.py

feat(skills): deferred skill discovery via describe_skill tool (#3775)

2026-07-04 23:09:29 +08:00

describe.py

fix(skills): escape untrusted skill metadata before it enters the model prompt (#4128)

2026-07-13 10:40:22 +08:00

frontmatter.py

fix(skills): safely tokenize portable allowed-tools patterns (#4984)

2026-08-28 08:58:59 +08:00

installer.py

fix(skills): reject colon in zip member names to close NTFS ADS smuggling gap (#4236)

2026-07-19 22:36:15 +08:00

package_paths.py

feat(skills): add skill review quality gate (#4037)

2026-07-11 15:58:07 +08:00

parser.py

fix(skills): safely tokenize portable allowed-tools patterns (#4984)

2026-08-28 08:58:59 +08:00

permissions.py

Fix custom skill install permissions (#3241)

2026-05-28 15:48:32 +08:00

projection.py

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

security_scanner.py

fix(skills): parse Responses API content blocks in moderation scanner (#4936)

2026-08-24 21:27:43 +08:00

security_static_scanner.py

feat(skills): Add native SkillScan phase 1 for skills (#3033)

2026-07-07 21:44:28 +08:00

slash.py

feat(frontend): render slash-skill activations as inline chips (#3981)

2026-07-08 21:58:33 +08:00

tool_policy.py

fix(skills): apply allowed-tools only to active skills (#4098)

2026-07-16 14:12:02 +08:00

types.py

feat: add Lark CLI integration (#3971)

2026-07-26 08:09:17 +08:00

validation.py

feat(skills): add skill review quality gate (#4037)

2026-07-11 15:58:07 +08:00