Prevent skills manifests from hashing files outside the skill directory #3410

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

jlowin merged 1 commit into main from codex/fix-symlink-target-hash-vulnerability

Mar 7, 2026

+30 −2

Merged

Prevent skills manifests from hashing files outside the skill directory #3410

Block out-of-skill symlink hashing in skills scan

Mintlify / Mintlify Deployment skipped Mar 6, 2026 in 0s

Skipping deployment

No eligible deployments found for changes

Details

No changes to preview.

View more details on Mintlify