xl-openai 5c305eb50b Harden skill installation against unsafe symlinks (#39608) ...

## What changed

- Require selected skill paths to resolve within the cloned repository and reject
  symlinked path components.
- Reject special files and symlinks that escape the selected skill or resolve to
  anything other than a regular file.
- Add regression tests showing that escaping symlinks are rejected while links
  to regular files within the skill are installed as file contents.

GitOrigin-RevId: d4c3f09fb630dea96b34ea5552de571b36f1ceca

2026-08-20 06:10:03 +00:00

..

src

Harden skill installation against unsafe symlinks (#39608)

2026-08-20 06:10:03 +00:00

tests

Harden skill installation against unsafe symlinks (#39608)

2026-08-20 06:10:03 +00:00

BUILD.bazel

build: run buildifier from just fmt (#28125)

2026-06-13 21:43:39 -07:00

build.rs

refactor(core): move embedded system skills into codex-skills crate (#12435)

2026-02-21 08:34:08 +00:00

Cargo.toml

Centralize skill invocation helpers in codex-skills (#37174)

2026-08-05 22:26:59 +00:00