2 Commits

Author	SHA1	Message	Date
Jeremy McSpadden	8d29ecd02f	fix: add missing 'act as' injection pattern to prompt guard hook (#1697) ... Fixes #1696 The gsd-prompt-guard.js hook was missing the 'act as a/an/the' prompt injection pattern that security.cjs includes. Adds the pattern with the same (?!plan|phase|wave) negative lookahead exception to allow legitimate GSD workflow references.	2026-04-04 15:50:04 -04:00
Tom Boucher	62db008570	security: add prompt injection guards, path traversal prevention, and input validation ... Defense-in-depth security hardening for a codebase where markdown files become LLM system prompts. Adds centralized security module, PreToolUse hook for injection detection, and CI-ready codebase scan. New files: - security.cjs: path traversal prevention, prompt injection scanner/sanitizer, safe JSON parsing, field name validation, shell arg validation - gsd-prompt-guard.js: PreToolUse hook scans .planning/ writes for injection - security.test.cjs: 62 unit tests for all security functions - prompt-injection-scan.test.cjs: CI scan of all agent/workflow/command files Hardened code paths: - readTextArgOrFile: path traversal guard (--prd, --text-file) - cmdStateUpdate/Patch: field name validation prevents regex injection - cmdCommit: sanitizeForPrompt strips invisible chars from commit messages - gsd-tools --fields: safeJsonParse wraps unprotected JSON.parse - cmdFrontmatterGet/Set: null byte rejection - cmdVerifyPathExists: null byte rejection - install.js: registers prompt guard hook, updates uninstaller Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-20 11:38:26 -04:00