@hanhnd/agent-kit 1.0.6 → 1.0.7

package/README.md

@@ -11,6 +11,8 @@
 | `/ak:brainstorm [idea]`          | Strategic architectural analysis                                   |
 | `/ak:plan [file or idea]`        | Create an implementation blueprint                                 |
 | `/ak:code [file or task]`        | Implement from a plan                                              |
+| `/ak:code-simplify`              | Refactor modified code for readability                             |
+| `/ak:research [topic]`           | Research a topic                                                   |
 | `/ak:review-pr [PR URL]`         | Review a pull request                                              |
 | `/ak:review`                     | Review uncommitted local changes                                   |
 | `/ak:ticket [ID]`                | Fetch a Jira ticket and plan from it                               |
@@ -27,7 +29,7 @@
 
 ```bash
 claude plugin marketplace add https://github.com/hanh-nd/agent-kit
-claude plugin install agent-kit
+claude plugin install ak
 ```
 
 The plugin fetches from GitHub, registers the MCP server automatically, and makes all commands available immediately.
@@ -43,8 +45,8 @@ export BITBUCKET_API_TOKEN="your-atlassian-api-token"
 export BITBUCKET_DEFAULT_WORKSPACE="your-default-workspace-slug"
 ```
 
-To update: `claude plugin update agent-kit`
-To uninstall: `claude plugin uninstall agent-kit`
+To update: `claude plugin update ak`
+To uninstall: `claude plugin uninstall ak`
 
 ---
 
@@ -65,7 +67,7 @@ npm run build
 
 ```bash
 claude plugin marketplace add /absolute/path/to/agent-kit
-claude plugin install agent-kit
+claude plugin install ak
 ```
 
 This registers the MCP server automatically (pointing to your local build). Do **not** manually add a `kit-agents` entry to `settings.json` — the plugin handles that.
@@ -89,6 +91,16 @@ export BITBUCKET_DEFAULT_WORKSPACE="your-default-workspace-slug"
 
 ---
 
+### Option 3: Install as Gemini Extension (Optional)
+
+If you want to reuse the commands with [Gemini CLI](https://geminicli.com) (for `/ak:delegate` to Gemini), install it using:
+
+```bash
+gemini extension install https://github.com/hanh-nd/agent-kit
+```
+
+---
+
 ## Development
 
 ```bash

package/dist/kit-server.js

@@ -21043,12 +21043,29 @@ import * as path2 from "path";
 function sanitize(input) {
   return String(input).replace(/[;&|`$<>\\]/g, "").trim().slice(0, 500);
 }
+var FORBIDDEN_FILES = [
+  ".env",
+  ".bashrc",
+  ".zshrc",
+  ".profile",
+  ".bash_profile",
+  ".bash_history",
+  ".zsh_history",
+  "config.mjs"
+  // Some projects use this for sensitive config
+];
 function validatePath(filePath, baseDir = process.cwd()) {
   const resolved = path2.resolve(baseDir, filePath);
   const root = path2.resolve(baseDir);
   if (resolved !== root && !resolved.startsWith(root + path2.sep)) {
     throw new Error(`Path traversal detected: ${filePath}`);
   }
+  const fileName = path2.basename(resolved);
+  if (FORBIDDEN_FILES.some(
+    (forbidden) => fileName === forbidden || fileName.startsWith(forbidden + ".")
+  )) {
+    throw new Error(`Access to sensitive file is FORBIDDEN: ${fileName}`);
+  }
   return resolved;
 }
 var GIT_TIMEOUT = parseInt(process.env.GEMINI_KIT_GIT_TIMEOUT || "30000", 10);

package/dist/tools/security.d.ts

@@ -14,9 +14,8 @@
  */
 export declare function sanitize(input: string): string;
 /**
- * Validate file path to prevent path traversal attacks
- * Uses stricter path.sep check to prevent prefix matching flaws
- * (e.g., /.geminit-kit/handoffs/app should not match /.geminit-kit/handoffs/app-secret)
+ * Validate file path to prevent path traversal attacks and access to forbidden files.
+ * Uses stricter path.sep check to prevent prefix matching flaws.
  */
 export declare function validatePath(filePath: string, baseDir?: string): string;
 /**

package/dist/tools/security.js

@@ -25,17 +25,35 @@ export function sanitize(input) {
         .slice(0, 500); // Limit length
 }
 /**
- * Validate file path to prevent path traversal attacks
- * Uses stricter path.sep check to prevent prefix matching flaws
- * (e.g., /.geminit-kit/handoffs/app should not match /.geminit-kit/handoffs/app-secret)
+ * Sensitive files that agents are FORBIDDEN from reading/writing.
+ * Includes environment variables, shell configs, and system profiles.
+ */
+const FORBIDDEN_FILES = [
+    '.env',
+    '.bashrc',
+    '.zshrc',
+    '.profile',
+    '.bash_profile',
+    '.bash_history',
+    '.zsh_history',
+    'config.mjs', // Some projects use this for sensitive config
+];
+/**
+ * Validate file path to prevent path traversal attacks and access to forbidden files.
+ * Uses stricter path.sep check to prevent prefix matching flaws.
  */
 export function validatePath(filePath, baseDir = process.cwd()) {
     const resolved = path.resolve(baseDir, filePath);
     const root = path.resolve(baseDir);
-    // Stricter: exact match OR starts with root + separator
+    // 1. Path traversal check
     if (resolved !== root && !resolved.startsWith(root + path.sep)) {
         throw new Error(`Path traversal detected: ${filePath}`);
     }
+    // 2. Forbidden files check (exact filename or suffix)
+    const fileName = path.basename(resolved);
+    if (FORBIDDEN_FILES.some((forbidden) => fileName === forbidden || fileName.startsWith(forbidden + '.'))) {
+        throw new Error(`Access to sensitive file is FORBIDDEN: ${fileName}`);
+    }
     return resolved;
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanhnd/agent-kit",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "Super Engineer - Team of AI Agents for software development (Claude Code Plugin)",
   "type": "module",
   "main": "dist/kit-server.js",