Tom Boucher 62db008570 security: add prompt injection guards, path traversal prevention, and input validation ...

Defense-in-depth security hardening for a codebase where markdown files become
LLM system prompts. Adds centralized security module, PreToolUse hook for
injection detection, and CI-ready codebase scan.

New files:
- security.cjs: path traversal prevention, prompt injection scanner/sanitizer,
  safe JSON parsing, field name validation, shell arg validation
- gsd-prompt-guard.js: PreToolUse hook scans .planning/ writes for injection
- security.test.cjs: 62 unit tests for all security functions
- prompt-injection-scan.test.cjs: CI scan of all agent/workflow/command files

Hardened code paths:
- readTextArgOrFile: path traversal guard (--prd, --text-file)
- cmdStateUpdate/Patch: field name validation prevents regex injection
- cmdCommit: sanitizeForPrompt strips invisible chars from commit messages
- gsd-tools --fields: safeJsonParse wraps unprotected JSON.parse
- cmdFrontmatterGet/Set: null byte rejection
- cmdVerifyPathExists: null byte rejection
- install.js: registers prompt guard hook, updates uninstaller

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-20 11:38:26 -04:00

..

agent-frontmatter.test.cjs

feat(discuss-phase): auto-generate DISCUSSION-LOG.md for audit trail (#1209)

2026-03-19 12:25:59 -04:00

antigravity-install.test.cjs

feat: add Antigravity runtime support (#1058)

2026-03-15 19:31:01 -06:00

claude-md.test.cjs

feat(claude-md): add workflow enforcement guidance

2026-03-17 11:41:44 -04:00

codex-config.test.cjs

fix(codex-config): preserve EOL when enabling codex hooks

2026-03-20 13:24:19 +08:00

commands.test.cjs

fix(lifecycle): extract one-liner from summary body when not in frontmatter

2026-03-19 21:29:25 +05:00

config.test.cjs

fix(tests): add USERPROFILE override for Windows HOME sandboxing

2026-03-20 14:56:28 +01:00

copilot-install.test.cjs

test: update agent count for new gsd-advisor-researcher agent

2026-03-19 20:08:50 -05:00

core.test.cjs

security: add prompt injection guards, path traversal prevention, and input validation

2026-03-20 11:38:26 -04:00

cursor-conversion.test.cjs

refactor: adopt planningPaths() across 4 modules — eliminate 34 inline path constructions

2026-03-18 23:39:47 -04:00

dispatcher.test.cjs

test(10-01): add dispatcher error paths and routing branch tests

2026-02-26 05:49:31 +10:00

frontmatter-cli.test.cjs

fix(windows): cross-platform path separators, JSON quoting, and dollar signs

2026-02-27 11:34:36 -06:00

frontmatter.test.cjs

fix(quick-1): remove HIGH severity test overfitting in 4 test files

2026-02-26 05:49:31 +10:00

helpers.cjs

fix(tests): make HOME sandboxing opt-in to avoid breaking git-dependent tests

2026-03-18 23:10:56 +01:00

init.test.cjs

fix(init): add ROADMAP fallback to plan-phase, execute-phase, and verify-work (#1238)

2026-03-20 10:38:57 -04:00

milestone.test.cjs

refactor: consolidate STATE.md field helpers, fix command injection in isGitIgnored

2026-03-19 15:05:20 -04:00

model-profiles.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

path-replacement.test.cjs

fix: use ~/ instead of resolved absolute paths in global install

2026-03-18 09:57:33 +00:00

phase.test.cjs

refactor: consolidate STATE.md field helpers, fix command injection in isGitIgnored

2026-03-19 15:05:20 -04:00

profile-output.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

profile-pipeline.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

prompt-injection-scan.test.cjs

security: add prompt injection guards, path traversal prevention, and input validation

2026-03-20 11:38:26 -04:00

quick-branching.test.cjs

feat(quick): add quick-task branch support

2026-03-17 12:04:02 -04:00

quick-research.test.cjs

feat(quick): add --research flag for focused pre-planning research (#317) (#1063)

2026-03-15 11:45:25 -06:00

roadmap.test.cjs

fix(roadmap): handle 5-column progress tables with Milestone column

2026-03-19 21:30:41 +05:00

runtime-converters.test.cjs

fix: universal agent name replacement for non-Claude runtimes (#766) (#1195)

2026-03-18 19:20:58 -04:00

security.test.cjs

security: add prompt injection guards, path traversal prevention, and input validation

2026-03-20 11:38:26 -04:00

state.test.cjs

refactor: consolidate STATE.md field helpers, fix command injection in isGitIgnored

2026-03-19 15:05:20 -04:00

template.test.cjs

test: add coverage for model-profiles, template, profile-pipeline, profile-output (#1170)

2026-03-18 09:55:55 -06:00

uat.test.cjs

feat: add verification debt tracking and /gsd:audit-uat command

2026-03-19 00:05:05 -05:00

verify-health.test.cjs

fix(health): preserve state on phase mismatch repair

2026-03-17 11:08:32 -04:00

verify.test.cjs

test(03-03): add 20 tests for verify references, commits, artifacts, key-links

2026-02-26 05:47:19 +10:00