@miphamai/cli 0.77.1 → 0.77.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miphamai/cli",
-  "version": "0.77.1",
+  "version": "0.77.2",
   "description": "Mipham Code — Multi-model open-core intelligent coding terminal by MiphamAI",
   "keywords": [
     "ai",

package/src/shared/package-info.ts

@@ -9,7 +9,7 @@
 export const PACKAGE_NAME = '@miphamai/cli' as const
 
 /** 当前发布版本 */
-export const PACKAGE_VERSION = '0.77.1' as const
+export const PACKAGE_VERSION = '0.77.2' as const
 
 /** npm install 全局安装命令 */
 export const NPM_INSTALL_COMMAND = `npm install -g ${PACKAGE_NAME}` as const

package/src/skills/marketplace.ts

@@ -53,6 +53,17 @@ export function isValidMarketplaceRef(owner: string, repo: string): boolean {
   return valid(owner) && valid(repo)
 }
 
+/**
+ * A skill name is used as a filename segment when installing from a marketplace.
+ * It must be a single safe segment: start with an alphanumeric and contain only
+ * alphanumerics, dots, dashes, and underscores — no path separators (`/`, `\`),
+ * no leading dot (so `..` cannot traverse), no whitespace. Marketplace frontmatter
+ * is untrusted, so this gate fails closed before the name ever touches a path.
+ */
+export function isValidSkillName(name: string): boolean {
+  return /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(name)
+}
+
 /**
  * Read the marketplace sources from disk. A missing or corrupt file falls back
  * to the default Anthropic sources.

package/src/skills/registry.ts

@@ -17,7 +17,12 @@ import { join } from 'node:path'
 import { homedir } from 'node:os'
 import type { MiphamConfig } from '../shared/types.js'
 import communitySkills from './community-registry.json'
-import { readMarketplaces, findSkillInMarketplaces, downloadFile } from './marketplace'
+import {
+  readMarketplaces,
+  findSkillInMarketplaces,
+  downloadFile,
+  isValidSkillName,
+} from './marketplace'
 
 const SKILLS_DIR = join(homedir(), '.mipham', 'skills')
 
@@ -221,6 +226,14 @@ async function installFromMarketplace(
     }
   }
 
+  if (!isValidSkillName(found.name)) {
+    return {
+      success: false,
+      name: found.name,
+      message: `Refusing to install skill with unsafe name "${found.name}": skill names must be a single safe filename segment (letters, digits, dots, dashes, underscores).`,
+    }
+  }
+
   const destPath = join(SKILLS_DIR, `${found.name}.SKILL.md`)
   if (existsSync(destPath)) {
     return {
@@ -279,6 +292,14 @@ export async function installSkillFromUrl(
       .pop()
       ?.replace(/\.(SKILL\.)?md$/i, '') || 'custom-skill'
 
+  if (!isValidSkillName(name)) {
+    return {
+      success: false,
+      name,
+      message: `Refusing to install from URL with unsafe name "${name}": skill names must be a single safe filename segment (letters, digits, dots, dashes, underscores).`,
+    }
+  }
+
   const destDir = join(SKILLS_DIR)
   const destPath = join(destDir, `${name}.SKILL.md`)
 
@@ -322,6 +343,14 @@ export function listInstalledSkills(): string[] {
  * Remove an installed skill.
  */
 export function removeSkill(skillName: string): InstallResult {
+  if (!isValidSkillName(skillName)) {
+    return {
+      success: false,
+      name: skillName,
+      message: `Refusing to remove skill with unsafe name "${skillName}": skill names must be a single safe filename segment (letters, digits, dots, dashes, underscores).`,
+    }
+  }
+
   const destPath = join(SKILLS_DIR, `${skillName}.SKILL.md`)
   if (!existsSync(destPath)) {
     return { success: false, name: skillName, message: `Skill "${skillName}" is not installed.` }

package/src/tools/exec/bash.ts

@@ -320,7 +320,7 @@ export function createBashTool(credentialConfig?: CredentialMaskingConfig): Tool
         command: { type: 'string', description: 'The bash command to execute' },
         description: {
           type: 'string',
-          description: 'What this command does (for audit log)',
+          description: 'What this command does, in plain words (do not echo the command itself)',
         },
         timeout: {
           type: 'integer',