Prasanth Kotaru 2d636c50bf security: narrow Bash(bun run:*) to the six shipped portal CLIs (#396) ...

The upstream template pre-approves `Bash(bun run:*)`, which auto-approves
`bun run <any file>` — arbitrary TypeScript from anywhere on disk — on every
fork. Each portal SKILL.md already declares the tight form in its own
allowed-tools; this makes settings.json agree with them.

Blast radius drops from "any file on the machine" to the repo's own CLIs,
with no new prompts in the /scrape path. tools/security_guards.py's
ALLOWED_PERMISSIONS is updated in the same commit, as its docstring requires.

Local: security_guards OK, lint_skills OK, 318 tests pass.

Claude-Session: https://claude.ai/code/session_01HHqEAQqGS2KKXASiYcrAHQ

2026-08-30 20:27:31 +02:00

..

agents

Initial release: AI-powered job application framework

2026-03-23 08:34:06 +01:00

commands

feat(ats): extract PDF text with pypdf before Poppler (#369)

2026-08-26 20:07:03 +02:00

skills

fix(scrape): persist each posting's publication date in seen_jobs.json (#390) (#391)

2026-08-30 20:26:37 +02:00

settings.json

security: narrow Bash(bun run:*) to the six shipped portal CLIs (#396)

2026-08-30 20:27:31 +02:00