Prevent skills manifests from hashing files outside the skill directory#3410

Merged

jlowin merged 1 commit intomainfrom

codex/fix-symlink-target-hash-vulnerability

Mar 7, 2026

Commits on Mar 6, 2026

Block out-of-skill symlink hashing in skills scan
jlowin
committed