gstack/scripts/resolvers
Garry Tan 50d7b5fa1c
fix: content trust boundary markers in browse output
Wrap page-content commands (text, html, links, forms, accessibility,
console, dialog, snapshot) with --- BEGIN/END UNTRUSTED EXTERNAL CONTENT ---
markers. Covers direct commands (server.ts), chain sub-commands, and
snapshot output (meta-commands.ts).

Adds PAGE_CONTENT_COMMANDS set and wrapUntrustedContent() helper in
commands.ts (single source of truth, DRY). Expands the SKILL.md trust
warning with explicit processing rules for agents.

Clears Snyk W011 (third-party content exposure).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-28 23:37:58 -07:00
..
browse.ts fix: content trust boundary markers in browse output 2026-03-28 23:37:58 -07:00
codex-helpers.ts feat: worktree isolation for E2E tests + infrastructure elegance (v0.11.12.0) (#425) 2026-03-23 23:05:22 -07:00
constants.ts feat: worktree isolation for E2E tests + infrastructure elegance (v0.11.12.0) (#425) 2026-03-23 23:05:22 -07:00
design.ts feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551) 2026-03-27 20:32:59 -06:00
index.ts feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551) 2026-03-27 20:32:59 -06:00
preamble.ts feat: user sovereignty — AI models recommend, users decide (v0.13.2.0) (#603) 2026-03-28 10:25:37 -06:00
review.ts fix: 6 critical fixes + community PR guardrails (v0.13.2.0) (#602) 2026-03-28 11:31:56 -06:00
testing.ts fix: zsh glob compatibility across all skill templates (v0.12.8.1) (#559) 2026-03-27 00:23:37 -06:00
types.ts feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551) 2026-03-27 20:32:59 -06:00
utility.ts fix: zsh glob compatibility across all skill templates (v0.12.8.1) (#559) 2026-03-27 00:23:37 -06:00