0xbyt4 25fb9aafcb fix: add service domain blocklist and entity_id validation to HA tools ...

Block dangerous HA service domains (shell_command, command_line,
python_script, pyscript, hassio, rest_command) that allow arbitrary
code execution or SSRF. Add regex validation for entity_id to prevent
path traversal attacks. 17 new tests covering both security features.

2026-03-01 11:53:50 +03:00

..

environments

Merge pull request #158 from Indelwin/feature/docker-volumes

2026-02-27 23:06:06 -08:00

__init__.py

refactor: streamline cron job handling and update CLI commands

2026-02-21 16:21:19 -08:00

approval.py

fix: prevent false positives in recursive delete detection

2026-02-26 16:32:01 +03:00

browser_tool.py

feat(api): implement dynamic max tokens handling for various providers

2026-02-26 20:23:56 -08:00

clarify_tool.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

code_execution_tool.py

Fix: #41

2026-02-25 21:16:15 -08:00

cronjob_tools.py

fix: cron prompt injection scanner bypass for multi-word variants

2026-02-26 13:55:54 +03:00

debug_helpers.py

refactor: consolidate debug logging across tools with shared DebugSession class

2026-02-21 03:53:24 -08:00

delegate_tool.py

feat: integrate honcho-ai package and enhance tool progress callback in delegate_tool

2026-02-27 23:45:52 -08:00

file_operations.py

Merge pull request #61 from 0xbyt4/fix/write-deny-macos-symlink

2026-02-27 01:32:19 -08:00

file_tools.py

feat: add docker_volumes config for custom volume mounts

2026-02-28 07:12:48 +10:00

fuzzy_match.py

Cleanup time!

2026-02-20 23:23:32 -08:00

homeassistant_tool.py

fix: add service domain blocklist and entity_id validation to HA tools

2026-03-01 11:53:50 +03:00

honcho_tools.py

feat: add Honcho AI-native memory integration

2026-02-26 18:07:17 -05:00

image_generation_tool.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

interrupt.py

feat: enhance interrupt handling and container resource configuration

2026-02-23 02:11:33 -08:00

memory_tool.py

Fix memory tool entry parsing when content contains section sign

2026-02-28 01:33:41 +03:00

mixture_of_agents_tool.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

openrouter_client.py

refactor: integrate Nous Portal support in auxiliary client

2026-02-25 18:39:36 -08:00

patch_parser.py

Add file manipulation tools and enhance setup scripts

2026-02-05 03:49:46 -08:00

process_registry.py

fix(process): use shlex to safely quote commands in bg_command for improved security

2026-02-27 22:50:26 -08:00

registry.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

rl_training_tool.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

send_message_tool.py

feat: enhance interrupt handling and container resource configuration

2026-02-23 02:11:33 -08:00

session_search_tool.py

feat(api): implement dynamic max tokens handling for various providers

2026-02-26 20:23:56 -08:00

skill_manager_tool.py

Harden agent attack surface: scan writes to memory, skills, cron, and context files

2026-02-25 23:43:15 -05:00

skills_guard.py

Harden agent attack surface: scan writes to memory, skills, cron, and context files

2026-02-25 23:43:15 -05:00

skills_hub.py

refactor: enhance error handling with structured logging across multiple modules

2026-02-21 03:32:11 -08:00

skills_sync.py

refactor: enhance error handling with structured logging across multiple modules

2026-02-21 03:32:11 -08:00

skills_tool.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

terminal_tool.py

Merge pull request #158 from Indelwin/feature/docker-volumes

2026-02-27 23:06:06 -08:00

todo_tool.py

More major refactor/tech debt removal!

2026-02-21 20:22:33 -08:00

transcription_tools.py

refactor: streamline API key retrieval in transcription and TTS tools

2026-02-26 19:56:42 -08:00

tts_tool.py

refactor: streamline API key retrieval in transcription and TTS tools

2026-02-26 19:56:42 -08:00

vision_tools.py

feat(api): implement dynamic max tokens handling for various providers

2026-02-26 20:23:56 -08:00

web_tools.py

feat(ocr-and-documents): add OCR and document extraction skills

2026-02-26 23:06:08 -08:00