Repository navigation

fix: sanitize GCS blob names to prevent path traversal in skill loading - #5281

Closed

bishtsec wants to merge 14 commits into

google:mainfrom

Closed

fix: sanitize GCS blob names to prevent path traversal in skill loading#5281
bishtsec wants to merge 14 commits into
google:mainfrom
bishtsec:main

Commits on Apr 11, 2026
- Enhance security in blob path normalization
  bishtsec
  authored
  4efa502
- Fix indentation in _load_files_in_dir function
  bishtsec
  authored
  80d9210
- Fix indentation in _load_files_in_dir function
  bishtsec
  authored
  83b21a9
Commits on Apr 13, 2026
- Implement path traversal detection in skill_toolset.py
  bishtsec
  authored
  ec55df0
- Update skill_toolset.py
  bishtsec
  authored
  657a3bb
- Fix key assignment in download function
  bishtsec
  authored
  b88f9f7
- Enhance path validation in skill_toolset.py
  bishtsec
  authored
  10c997e
- Refactor path validation in skill_toolset.py
  bishtsec
  authored
  8c772ff
- Fix key assignment for blob download in _utils.py
  bishtsec
  authored
  e273365
- Refactor _load_files_in_dir for type hints and safety
  bishtsec
  authored
  025f834
- Merge branch 'main' into main
  rohityan
  authored
  0e0f6d6
- Fix pyink formatting and isort
  adityabisht-lab
  committed
  d39dfdd
Commits on Apr 28, 2026
- chore: resolve merge conflicts with upstream/main
  BISHT-CX
  committed
  498837f
Commits on May 8, 2026
- test: add security tests for path traversal fix (VRP #499557362)
  BISHT-CX
  committed
  d340122