Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
microsoft/skillopt
main @ db46cd9
20
Fixes
0
CVEs
HIGH
Peak severity
30.0%
Coverage
Highlights
Path Traversal: 6 prior fixes. Scrutinize any change in this area.
skillopt_sleep/adapters/superpowers.py: most-fixed (6 issues). Treat as high-risk during review.
14 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Multiple fixes target path traversal via skill_name and symlink following during overlay writes and candidate reads, indicating a persistent weakness in path validation across different operations.
Information Disclosure: Generated code subprocesses inherited parent environment variables containing secrets, fixed by scrubbing to minimal env; this is a critical leak vector for untrusted code execution.
Sandbox Escape: Sandbox mode allowlist and approval-policy construction were flawed, and file-edit rollouts could run with sandbox disabled, allowing escape from intended isolation.