PT-2026-55371

Impact Following the path-safety patches in GHSA-wx3m-whqv-xv47 v0.1.2, a comprehensive multi-angle audit surfaced five further vulnerabilities, now patched in v0.1.3: 1. source sha argument injection in git ls-tree CRITICAL. InstalledSkill.source sha deserialized from .skills.toml committed,...