mirror of https://github.com/garrytan/gstack.git
0eebbbf247
- R7/R9: replace "user-global equivalents" shorthand with explicit ~/.claude/settings.json and ~/.claude/settings.local.json paths - R8: drop "Matches the campaign's obfuscation" prose (campaign-specific decoration) and rewrite the FP rationale as instruction - R9 (a): add node --require and node -e <inline-require> to the interpreter invocation patterns (covers indirect-require evasion) - R9 (b): replace ambiguous "lockfile integrity hash" with "installed locked-package artifacts" — lockfile integrity is per-package, not per-file, so the previous wording invited reviewer confusion Rule trigger surface unchanged for R7 (mem-read) and R12 (Session domains in executable context). R8's matching condition is unchanged (_0x density + crypto-decode call). R9 gains two indirect invocation patterns and clarified manifest wording. |
||
|---|---|---|
| .. | ||
| ACKNOWLEDGEMENTS.md | ||
| SKILL.md | ||
| SKILL.md.tmpl | ||