mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-05 23:50:48 +00:00
- binarylane/continue.sh: Replace unsafe inline echo with inject_env_vars_ssh to prevent command injection if OPENROUTER_API_KEY contains single quotes - test/record.sh: Pass credential values via sys.argv instead of interpolating into Python string literals to prevent Python injection Agent: security-auditor Co-authored-by: A <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| fixtures | ||
| mock.sh | ||
| qa-dry-run.sh | ||
| record.sh | ||
| run.sh | ||
| update-readme.py | ||