Mads Lorentzen fb91be7a0b security: treat job postings as untrusted input across /apply and /rank (#175) ...

Prompt-injection hardening from the dataflow analysis in #173 by @Defaultuser361: data-not-instructions rules in /apply and /rank, reviewer research constrained to the user-confirmed company identity, writing-style verify rule tightened to independently located sources (framework_version 1.1.0), SECURITY.md private reporting channel, README note. Closes #173.

2026-07-17 21:48:59 +02:00

..

job-application-assistant

security: treat job postings as untrusted input across /apply and /rank (#175)

2026-07-17 21:48:59 +02:00

job-scraper

feat(job-scraper): per-portal enabled toggle honored by /scrape (#160)

2026-07-15 20:20:37 +02:00

upskill

fix(skills): replace bold markdown with proper YAML Frontmatter (#16)

2026-06-15 21:41:10 +02:00