drafted 1.14.7 → 1.14.8

package/cli/drafted.mjs

@@ -1591,9 +1591,12 @@ async function syncOneSkill(ref, outDir, org) {
     mkdirSync(dirname(full), { recursive: true });
     writeFileSync(full, content);
   }
-  // createdBy lets the caller decide whether to auto-run this skill's setup: shell authored
-  // by someone else must not run unattended on sync (RCE via a teammate's/forked skill).
-  return { ref, slug, hash, status: 'ok', createdBy: skill.createdBy ?? null };
+  // createdBy + forkedFrom decide whether this skill's setup may auto-run: shell authored by
+  // someone else must not run unattended on sync. forkedFrom is load-bearing — the CLI/MCP
+  // AUTO-forks a global/other-org skill on use, which copies the source author's setup but
+  // stamps createdBy = the forking (victim) user, so createdBy alone would mislabel foreign
+  // setup as self-authored. A forked skill is never treated as self-authored.
+  return { ref, slug, hash, status: 'ok', createdBy: skill.createdBy ?? null, forkedFrom: skill.forkedFrom ?? null };
 }
 
 const skillCmd = program.command('skill').description('Skill library operations');
@@ -1626,7 +1629,10 @@ skillCmd
           // authored by another org member, a fork, or an imported bundle must NOT run their
           // shell unattended (Causeway auto-syncs pinned skills), or a teammate's skill is
           // RCE on this host. `--allow-untrusted-setup` is the explicit opt-in.
-          const selfAuthored = r.createdBy && auth?.userId && r.createdBy === auth.userId;
+          // Self-authored = created by me AND not a fork (a fork carries another author's
+          // setup under my createdBy — see syncOneSkill). Forks/other-authored require the
+          // explicit opt-in.
+          const selfAuthored = r.createdBy && auth?.userId && r.createdBy === auth.userId && !r.forkedFrom;
           if (selfAuthored || opts.allowUntrustedSetup) {
             const s = runSkillSetup(join(opts.out, r.slug));
             r.setup = s.skipped ? 'none' : (s.ok ? 'ok' : 'failed');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.14.7",
+  "version": "1.14.8",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [