mirror of https://github.com/affaan-m/everything-claude-code.git synced 2026-02-16 03:13:08 +08:00

Files

Affaan Mustafa e41ee0c858 fix: resolve multiple reported issues (#205 , #182 , #188 , #172 , #173 ) (#207 )

* fix: resolve multiple reported issues (#205, #182, #188, #172, #173)

- fix(observe.sh): replace triple-quote JSON parsing with stdin pipe to
  prevent ~49% parse failures on payloads with quotes/backslashes/unicode
- fix(hooks.json): correct matcher syntax to use simple tool name regexes
  instead of unsupported logical expressions; move command/path filtering
  into hook scripts; use exit code 2 for blocking hooks
- fix(skills): quote YAML descriptions containing colons in 3 skill files
  and add missing frontmatter to 2 skill files for Codex CLI compatibility
- feat(rules): add paths: filters to all 15 language-specific rule files
  so they only load when working on matching file types
- fix(agents): align model fields with CONTRIBUTING.md recommendations
  (opus for planner/architect, sonnet for reviewers/workers, haiku for
  doc-updater)

* ci: use AgentShield GitHub Action instead of npx

Switch from npx ecc-agentshield to uses: affaan-m/agentshield@v1
for proper GitHub Action demo and marketplace visibility.

2026-02-11 23:48:45 -08:00

548 B

Raw Blame History

paths

**/*.ts

**/*.tsx

**/*.js

**/*.jsx

TypeScript/JavaScript Security

This file extends common/security.md with TypeScript/JavaScript specific content.

Secret Management

// NEVER: Hardcoded secrets
const apiKey = "sk-proj-xxxxx"

// ALWAYS: Environment variables
const apiKey = process.env.OPENAI_API_KEY

if (!apiKey) {
  throw new Error('OPENAI_API_KEY not configured')
}

Agent Support

Use security-reviewer skill for comprehensive security audits

548 B Raw Blame History

TypeScript/JavaScript Security

Secret Management

Agent Support

548 B

Raw Blame History