hermes-agent/optional-skills/research
JiahuiGu 0a2ee71ccc
fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276)
show_snapshot.py unpickled a user-supplied path unconditionally. pickle.loads
is equivalent to arbitrary code execution, so a snapshot from an untrusted
source = RCE. Require an explicit --i-trust-this-file acknowledgement before
calling pickle.loads, and emit a stderr warning when proceeding.

Co-authored-by: Jiahui-Gu <jiahuigu@users.noreply.github.com>
2026-05-25 01:51:21 -07:00
..
bioinformatics feat: add bioinformatics gateway skill 2026-03-21 16:15:24 -07:00
darwinian-evolver fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276) 2026-05-25 01:51:21 -07:00
domain-intel chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355) 2026-05-17 02:29:41 -07:00
drug-discovery fix(skills): move platforms key out of folded description: > scalars 2026-05-08 14:27:40 -07:00
duckduckgo-search feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills 2026-05-08 14:27:40 -07:00
gitnexus-explorer feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills 2026-05-08 14:27:40 -07:00
osint-investigation chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355) 2026-05-17 02:29:41 -07:00
parallel-cli feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills 2026-05-08 14:27:40 -07:00
qmd feat: add qmd optional skill — local knowledge base search 2026-03-07 20:39:05 -08:00
scrapling feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills 2026-05-08 14:27:40 -07:00
searxng-search feat(skills): gate 7 Linux/macOS-only skills from Windows via platforms frontmatter 2026-05-08 14:27:40 -07:00