Farukest a3ca71fe26 fix: use is_relative_to() for symlink boundary check in skills_guard ...

The symlink escape check in _check_structure() used startswith()
without a trailing separator. A symlink resolving to a sibling
directory with a shared prefix (e.g. 'axolotl-backdoor') would pass
the check for 'axolotl' since the string prefix matched.

Replaced with Path.is_relative_to() which correctly handles directory
boundaries and is consistent with the skill_view path check.

2026-03-04 17:23:23 +03:00

..

__init__.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_approval.py

test: add additional multiline bypass tests for find patterns

2026-03-02 04:46:27 -08:00

test_clarify_tool.py

test(tools): add unit tests for clarify_tool.py

2026-02-27 03:29:26 -05:00

test_code_execution.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_cron_prompt_injection.py

fix: cron prompt injection scanner bypass for multi-word variants

2026-02-26 13:55:54 +03:00

test_cronjob_tools.py

test: add unit tests for 8 modules (batch 2)

2026-02-26 13:54:20 +03:00

test_debug_helpers.py

fix(tests): isolate HERMES_HOME in tests and adjust log directory for debug session

2026-03-02 04:34:21 -08:00

test_delegate.py

Merge remote-tracking branch 'origin/main' into codex/align-codex-provider-conventions-mainrepo

2026-02-26 10:56:29 -08:00

test_file_operations.py

fix(tools): preserve empty content in ReadResult.to_dict()

2026-03-01 02:42:15 +03:00

test_file_tools_live.py

feat(tests): add live integration tests for file operations and shell noise filtering

2026-02-28 22:57:58 -08:00

test_file_tools.py

test: enhance session source tests and add validation for chat types

2026-02-26 00:53:57 -08:00

test_fuzzy_match.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_homeassistant_tool.py

fix: add service domain blocklist and entity_id validation to HA tools

2026-03-01 11:53:50 +03:00

test_interrupt.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_mcp_tool.py

feat(mcp): banner integration, /reload-mcp command, resources & prompts

2026-03-02 19:15:59 -08:00

test_memory_tool.py

test: add unit tests for 8 untested modules

2026-02-26 13:27:58 +03:00

test_patch_parser.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_process_registry.py

test: add unit tests for 8 modules (batch 2)

2026-02-26 13:54:20 +03:00

test_registry.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_session_search.py

fix: exclude current session from session_search results

2026-03-04 06:06:40 -08:00

test_skill_view_path_check.py

refactor: use Path.is_relative_to() for skill_view boundary check

2026-03-04 05:30:43 -08:00

test_skill_view_traversal.py

fix(security): block path traversal in skill_view file_path (fixes #220)

2026-03-02 02:00:09 -08:00

test_skills_guard.py

fix: use is_relative_to() for symlink boundary check in skills_guard

2026-03-04 17:23:23 +03:00

test_skills_hub_clawhub.py

Fix ClawHub Skills Hub adapter for updated API

2026-03-02 16:11:49 +01:00

test_skills_sync.py

test: add unit tests for 8 untested modules (batch 3) (#191)

2026-03-01 05:28:12 -08:00

test_symlink_prefix_confusion.py

fix: use is_relative_to() for symlink boundary check in skills_guard

2026-03-04 17:23:23 +03:00

test_terminal_disk_usage.py

fix(tools): use task-specific glob pattern in disk usage calculation

2026-03-01 03:17:50 +03:00

test_todo_tool.py

test: reorganize test structure and add missing unit tests

2026-02-26 03:20:08 +03:00

test_windows_compat.py

fix: guard POSIX-only process functions for Windows compatibility

2026-03-01 01:54:27 +03:00

test_write_deny.py

fix: resolve symlink bypass in write deny list on macOS

2026-02-26 13:30:55 +03:00