JiahuiGu 0a2ee71ccc fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276) ... show_snapshot.py unpickled a user-supplied path unconditionally. pickle.loads is equivalent to arbitrary code execution, so a snapshot from an untrusted source = RCE. Require an explicit --i-trust-this-file acknowledgement before calling pickle.loads, and emit a stderr warning when proceeding. Co-authored-by: Jiahui-Gu <jiahuigu@users.noreply.github.com>		2026-05-25 01:51:21 -07:00
..
autonomous-ai-agents	feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills	2026-05-08 14:27:40 -07:00
blockchain	chore(skills/evm): tighten SKILL.md to modern format	2026-05-13 17:18:39 -07:00
communication	fix(skills): move platforms key out of folded description: > scalars	2026-05-08 14:27:40 -07:00
creative	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
devops	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
dogfood	feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills	2026-05-08 14:27:40 -07:00
email/agentmail	feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills	2026-05-08 14:27:40 -07:00
finance	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
health	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
mcp	feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills	2026-05-08 14:27:40 -07:00
migration	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
mlops	chore: remove Atropos RL environments and tinker-atropos integration (#26106)	2026-05-15 10:36:38 +05:30
productivity	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
research	fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276)	2026-05-25 01:51:21 -07:00
security	fix(skills): move platforms key out of folded description: > scalars	2026-05-08 14:27:40 -07:00
software-development/rest-graphql-debug	rename(skills): api-testing -> rest-graphql-debug (#23589)	2026-05-10 22:22:19 -07:00
web-development	feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills	2026-05-08 14:27:40 -07:00
DESCRIPTION.md	fix: review fixes — path traversal guard, trust_style consistency, edge cases	2026-03-06 01:40:01 -08:00