mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-04-26 11:00:38 +00:00
b917e3f280
Raw `gh issue list` / `gh pr list` in agent prompts bypassed the bash collaborator gate, letting Claude read non-collaborator issues (potential prompt injection vector). All prompts now pipe through a jq filter using the cached collaborator list. - Added collaborator gate section to _shared-rules.md - Patched 10 prompt files with inline jq collaborator filter - High-risk: community-coordinator, security-issue-checker, qa-record-keeper, security-scanner (read issue bodies) - Lower-risk: PR list commands in refactor/security prompts Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| rules | ||
| scripts | ||
| skills | ||
| settings.json | ||