feat(security): audit workspace skill symlink escapes

2026-05-09 22:54:33 +00:00 · 2026-03-02 23:28:46 +00:00
parent d4ec0ed3c7
commit 132794fe74
6 changed files with 229 additions and 33 deletions
--- a/src/security/audit-extra.ts
+++ b/src/security/audit-extra.ts
@@ -35,5 +35,6 @@ export {
  collectPluginsCodeSafetyFindings,
  collectPluginsTrustFindings,
  collectStateDeepFilesystemFindings,
+  collectWorkspaceSkillSymlinkEscapeFindings,
  readConfigSnapshotForAudit,
 } from "./audit-extra.async.js";