bkinnightskytw
/
agent-orchestrator
mirror of https://github.com/ComposioHQ/agent-orchestrator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
agent-orchestrator/packages/plugins
History
harshitsinghbhandari 8f43006472 fix(agent-cursor): use printf %s pattern to prevent shell injection 
Fix shell injection vulnerability when combining systemPromptFile with
prompt. The prompt could contain shell metacharacters ($(), backticks)
that would be executed inside the double-quoted string.

Now uses the exact same pattern as OpenCode:
  "$(cat 'file'; printf '\n\n'; printf %s 'prompt')"

The shellEscape wraps prompt in single quotes (no shell expansion),
and printf %s outputs it literally without interpretation.

Co-Authored-By: Claude <noreply@anthropic.com>
 		2026-04-10 12:34:07 +05:30
..
agent-aider fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
agent-claude-code fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
agent-codex fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
agent-cursor fix(agent-cursor): use printf %s pattern to prevent shell injection 2026-04-10 12:34:07 +05:30
agent-opencode fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
notifier-composio fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
notifier-desktop fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
notifier-discord fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
notifier-openclaw fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
notifier-slack fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
notifier-webhook fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
runtime-process fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
runtime-tmux fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
scm-github fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
scm-gitlab fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
terminal-iterm2 fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
terminal-web fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
tracker-github fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
tracker-gitlab fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
tracker-linear fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
workspace-clone fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30
workspace-worktree fix: merge upstream main and resolve conflicts for cursor agent 2026-04-10 11:48:27 +05:30