@bluefly/openstandardagents 0.2.8 → 0.2.9

package/scripts/generate-agents-catalog.ts

@@ -23,7 +23,8 @@ function findAgents(): Agent[] {
     const manifestPath = join(AGENTS_DIR, entry, 'manifest.ossa.yaml');
     try {
       const content = readFileSync(manifestPath, 'utf-8');
-      const data = yaml.load(content) as any;
+      // Use safeLoad to prevent arbitrary code execution (CWE-502)
+      const data = yaml.load(content, { schema: yaml.JSON_SCHEMA }) as Record<string, unknown>;
       
       if (data?.agent) {
         agents.push({

package/scripts/generate-api-docs.ts

@@ -154,7 +154,8 @@ function main() {
     try {
       const specPath = join(coreDir, file);
       const specContent = readFileSync(specPath, 'utf-8');
-      const spec = yaml.load(specContent) as OpenAPISpec;
+      // Use JSON_SCHEMA to prevent arbitrary code execution (CWE-502)
+      const spec = yaml.load(specContent, { schema: yaml.JSON_SCHEMA }) as OpenAPISpec;
       
       const docContent = generateAPIDoc(spec, file);
       const outputFile = join(OUTPUT_DIR, file.replace('.openapi.yaml', '.md'));

package/scripts/generate-examples-docs.ts

@@ -31,7 +31,8 @@ function findYamlFiles(dir: string, category: string = ''): Example[] {
     } else if (entry.match(/\.(yaml|yml)$/)) {
       try {
         const content = readFileSync(fullPath, 'utf-8');
-        const data = yaml.load(content) as any;
+        // Use JSON_SCHEMA to prevent arbitrary code execution (CWE-502)
+        const data = yaml.load(content, { schema: yaml.JSON_SCHEMA }) as any;
         
         if (data?.agent) {
           examples.push({

package/scripts/generate-llms-ctx.sh

@@ -7,10 +7,10 @@ echo "Installing llms-txt..."
 pip install llms-txt --quiet
 
 echo "Generating llms-ctx.txt (without Optional)..."
-llms_txt2ctx llms.txt -o llms-ctx.txt
+llms_txt2ctx llms.txt > llms-ctx.txt
 
 echo "Generating llms-ctx-full.txt (with Optional)..."
-llms_txt2ctx llms.txt -o llms-ctx-full.txt --include-optional
+llms_txt2ctx llms.txt --optional True > llms-ctx-full.txt
 
 echo "✅ Generated:"
 echo "  - llms-ctx.txt ($(wc -l < llms-ctx.txt) lines)"