v0.2.1

saitamahang released this 17 Aug 07:27

· 11 commits to main since this release

5ca1202

Fixes

Harden URL imports against SSRF with HTTPS-only URLs, private-address rejection, and per-redirect validation
Reject state-changing requests that omit the Origin header
Restrict batch scans to recognized agent skill roots and canonical paths
Include regression tests and their required sources in the npm package
Support Windows CRLF and legacy CR line endings in skill frontmatter
Document pnpm supply-chain waiting periods and safe pre-1.0 upgrades

Validation

npm run test:batch
npm run build
npm pack --dry-run
npm package extraction test

Assets 2