Miguel Ángel 041f2fa196 fix(media-use): kill shell command injection in probe/heygen-search/eval ...

Swap execSync(<shell-string>) → execFileSync(file, [argv]) in probe.mjs, heygen-search.mjs, and eval.mjs so hostile filenames / queries / manifest metadata can't inject shell. Adds probe.test.mjs regression guard and a CI Test (skills) job so it actually runs. Closes the media-use High/Critical scanner alert.

2026-06-25 15:16:52 -04:00

..

scripts

fix(media-use): kill shell command injection in probe/heygen-search/eval

2026-06-25 15:16:52 -04:00

.gitignore

feat(media-use): core infrastructure — manifest, cache, adopt, probe (#1682)

2026-06-24 20:28:38 -04:00

SKILL.md

fix(skills): make media-use frontmatter valid YAML so skills add works (#1709)

2026-06-24 22:33:28 -04:00