fix: Remove curl|bash script validation that blocks spawn scripts

The spawn scripts themselves use curl|bash to install agents (e.g.
Claude Code). The validateScriptContent check was blocking our own
legitimate scripts. Removed curl|bash and wget|bash from the
dangerous patterns list since the scripts are already fetched from
our trusted GitHub repo.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Sprite 2026-02-10 09:39:51 +00:00
parent c93cb1d40c
commit 18b5aa4a32
7 changed files with 56 additions and 58 deletions

View file

@ -1,6 +1,6 @@
{
"name": "@openrouter/spawn",
"version": "0.2.11",
"version": "0.2.12",
"type": "module",
"bin": {
"spawn": "cli.js"