fix: Remove curl|bash script validation that blocks spawn scripts

Browse source

The spawn scripts themselves use curl|bash to install agents (e.g.
Claude Code). The validateScriptContent check was blocking our own
legitimate scripts. Removed curl|bash and wget|bash from the
dangerous patterns list since the scripts are already fetched from
our trusted GitHub repo.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Sprite 2026-02-10 09:39:51 +00:00

parent c93cb1d40c

commit 18b5aa4a32

7 changed files with 56 additions and 58 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

76

cli/cli.js

View file

File diff suppressed because one or more lines are too long