Affaan Mustafa 6e5b45ed28 fix: path traversal in install.sh, error logging in hooks ...

- Validate language names in install.sh to prevent path traversal via
  malicious args like ../../etc (only allow [a-zA-Z0-9_-])
- Replace silent catch in check-console-log.js with stderr logging so
  hook failures are visible to the user for debugging
- Escape backticks in session-end.js user messages to prevent markdown
  structure corruption in session files

2026-02-12 14:14:21 -08:00

..

ci

fix: harden CI validators, shell scripts, and expand test suite

2026-02-12 14:11:33 -08:00

hooks

fix: path traversal in install.sh, error logging in hooks

2026-02-12 14:14:21 -08:00

lib

feat: add TypeScript declaration files for all core libraries

2026-02-12 13:56:48 -08:00

release.sh

fix: harden CI validators, shell scripts, and expand test suite

2026-02-12 14:11:33 -08:00

setup-package-manager.js

fix: resolve ESLint errors and update tests for project-name fallback

2026-01-29 02:58:51 -08:00

skill-create-output.js

fix: resolve ESLint errors and update tests for project-name fallback

2026-01-29 02:58:51 -08:00