Skip to content
This repository was archived by the owner on Jul 5, 2026. It is now read-only.

fix(security): generate agent catalog snippets client-side - #277

Merged
JSONbored merged 2 commits into
mainfrom
codex/fix-untrusted-agent-snippets-vulnerability
Jun 28, 2026
Merged

fix(security): generate agent catalog snippets client-side#277
JSONbored merged 2 commits into
mainfrom
codex/fix-untrusted-agent-snippets-vulnerability

test(security): pin generated agent snippets

b7bc71b
Select commit
Loading
Failed to load commit list.
Superagent Security / Superagent Security Scan succeeded Jun 28, 2026 in 31s

PR scan passed

No suspicious PR changes were detected.

Details

This PR removes backend-provided executable snippets and generates them client-side using a safe quoting helper. No new security concerns were detected.