Tibsfox 5371622021 fix(manager): validate flag tokens to prevent injection via config (#1410) ...

Address review feedback: sanitize manager.flags values to allow only
CLI-safe tokens (--flag patterns and alphanumeric values). Invalid
tokens are dropped with a stderr warning. Prevents prompt injection
via compromised config.json.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-02 16:02:53 -07:00

..

commands.cjs

feat(hooks): add check-commit guard for commit_docs enforcement (#1395)

2026-04-01 16:11:00 -07:00

config.cjs

feat(manager): add per-step passthrough flags via config

2026-04-02 16:02:53 -07:00

core.cjs

feat(manager): add per-step passthrough flags via config

2026-04-02 16:02:53 -07:00

docs.cjs

feat: add /gsd:docs-update command for verified documentation generation (#1532)

2026-04-01 08:47:31 -06:00

frontmatter.cjs

fix(core): add concurrency safety and atomic state writes

2026-04-02 04:28:06 -07:00

init.cjs

fix(manager): validate flag tokens to prevent injection via config (#1410)

2026-04-02 16:02:53 -07:00

milestone.cjs

refactor: consolidate STATE.md field helpers, fix command injection in isGitIgnored

2026-03-19 15:05:20 -04:00

model-profiles.cjs

feat: add /gsd:docs-update command for verified documentation generation (#1532)

2026-04-01 08:47:31 -06:00

phase.cjs

fix(core): add concurrency safety and atomic state writes

2026-04-02 04:28:06 -07:00

profile-output.cjs

fix: list all supported skill directories in fallback text

2026-03-31 16:24:59 -03:00

profile-pipeline.cjs

fix: add temp file reaper to prevent unbounded /tmp accumulation

2026-03-20 15:46:06 -04:00

roadmap.cjs

fix(core): add concurrency safety and atomic state writes

2026-04-02 04:28:06 -07:00

schema-detect.cjs

feat: add schema drift detection to prevent false-positive verification

2026-04-01 16:53:20 -04:00

security.cjs

fix: replace invalid \Z regex anchor and remove redundant pattern

2026-03-23 22:19:49 -04:00

state.cjs

Merge pull request #1561 from Tibsfox/fix/concurrency-safety-1473a

2026-04-02 17:50:38 -04:00

template.cjs

feat: normalize generated markdown for markdownlint compliance (#1112)

2026-03-16 13:39:34 -06:00

uat.cjs

fix: replace invalid \Z regex anchor and remove redundant pattern

2026-03-23 22:19:49 -04:00

verify.cjs

fix(health): STATE/ROADMAP cross-validation and config checks

2026-04-02 04:20:02 -07:00

workstream.cjs

fix(workstream): require name arg for set, add --clear flag (#1527)

2026-04-01 14:35:00 -07:00