JiahuiGu 0a2ee71ccc fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276) ...

show_snapshot.py unpickled a user-supplied path unconditionally. pickle.loads
is equivalent to arbitrary code execution, so a snapshot from an untrusted
source = RCE. Require an explicit --i-trust-this-file acknowledgement before
calling pickle.loads, and emit a stderr warning when proceeding.

Co-authored-by: Jiahui-Gu <jiahuigu@users.noreply.github.com>

2026-05-25 01:51:21 -07:00

..

autonomous-ai-agents

feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills

2026-05-08 14:27:40 -07:00

blockchain

chore(skills/evm): tighten SKILL.md to modern format

2026-05-13 17:18:39 -07:00

communication

fix(skills): move platforms key out of folded description: > scalars

2026-05-08 14:27:40 -07:00

creative

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

devops

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

dogfood

feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills

2026-05-08 14:27:40 -07:00

email/agentmail

feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills

2026-05-08 14:27:40 -07:00

finance

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

health

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

mcp

feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills

2026-05-08 14:27:40 -07:00

migration

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

mlops

chore: remove Atropos RL environments and tinker-atropos integration (#26106)

2026-05-15 10:36:38 +05:30

productivity

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

research

fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276)

2026-05-25 01:51:21 -07:00

security

fix(skills): move platforms key out of folded description: > scalars

2026-05-08 14:27:40 -07:00

software-development/rest-graphql-debug

rename(skills): api-testing -> rest-graphql-debug (#23589)

2026-05-10 22:22:19 -07:00

web-development

feat(optional-skills): declare platforms frontmatter for all 63 undeclared skills

2026-05-08 14:27:40 -07:00

DESCRIPTION.md

fix: review fixes — path traversal guard, trust_style consistency, edge cases

2026-03-06 01:40:01 -08:00