From 29f8bfeeadd12e7cc8d0bec770a03413e6302a06 Mon Sep 17 00:00:00 2001 From: Tom Boucher Date: Sat, 11 Apr 2026 14:34:13 -0400 Subject: [PATCH] fix(test): allowlist plan-phase.md in prompt injection scan plan-phase.md exceeds 50K chars after pattern mapper step addition. This is legitimate orchestration complexity, not prompt stuffing. Co-Authored-By: Claude Opus 4.6 --- tests/prompt-injection-scan.test.cjs | 1 + 1 file changed, 1 insertion(+) diff --git a/tests/prompt-injection-scan.test.cjs b/tests/prompt-injection-scan.test.cjs index 5c8bc32dc..df3665848 100644 --- a/tests/prompt-injection-scan.test.cjs +++ b/tests/prompt-injection-scan.test.cjs @@ -53,6 +53,7 @@ const ALLOWLIST = new Set([ 'get-shit-done/bin/lib/security.cjs', // The security module itself 'get-shit-done/workflows/discuss-phase.md', // Large workflow (~50K) with power mode + i18n 'get-shit-done/workflows/execute-phase.md', // Large orchestration workflow (~51K) with wave execution + code-review gate + 'get-shit-done/workflows/plan-phase.md', // Large orchestration workflow (~52K) with pattern mapper + TDD mode 'hooks/gsd-prompt-guard.js', // The prompt guard hook 'tests/security.test.cjs', // Security tests 'tests/prompt-injection-scan.test.cjs', // This file