FanouZeng-TT fb16689312

fix(skillscan): classify env command launchers (#6428) ...

* fix(skillscan): classify env command launchers

* fix(skillscan): bound and correct env launcher parsing

Resolve env split strings iteratively with bounded work, preserving critical
findings on limit exhaustion. Tokenize each simple command in place and keep
quoted argv words distinct from adjacent redirection operators.

Honor env assignments after option markers, GNU split-string escapes, absolute
env paths, command/exec/sudo wrappers, and the non-exiting --debug option. Scope
stdin overrides to the pipeline consumer. Add 60 parser and scan regressions,
including recursion, many-command, and deep-group deadline cases.

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-10-08 09:57:13 +08:00

..

extension-api

feat(extensions): add host-bound Agent run control (#6190)

2026-10-03 21:16:01 +08:00

harness

fix(skillscan): classify env command launchers (#6428)

2026-10-08 09:57:13 +08:00