oh-my-opencode

Files

T

YeonGyu-Kim 98659783c0 fix(security): confine file resolution to project roots

Block traversal, out-of-root absolute path, and symlink escapes for @file references, file:// URIs, and config skill file loading while logging rejected attempts.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

2026-04-02 14:55:35 +09:00

builtin-skill-converter.ts

refactor(opencode-skill-loader): split loader and merger into focused modules

2026-02-08 16:21:19 +09:00

config-skill-entry-loader.test.ts

fix(security): confine file resolution to project roots

2026-04-02 14:55:35 +09:00

config-skill-entry-loader.ts

fix(security): confine file resolution to project roots

2026-04-02 14:55:35 +09:00

scope-priority.ts

refactor(opencode-skill-loader): split loader and merger into focused modules