Security hardening: sandbox, config, MCP, sessions, Telegram, schedule, skills/episodes, vector indexes#39

Merged

jkyberneees merged 38 commits into

mainfrom

fix/sec-findings

Jun 14, 2026

Commits on Jun 13, 2026

security: parallel_shell approval fallback + Telegram IPI hardening + approval user binding
jkyberneees
committed
security: wrap parallel_shell stdout/stderr as untrusted
jkyberneees
committed
FIX #7: resolve symlink directories before classifying read-only tools
jkyberneees
committed
FIX #8: @-resource resolver follows intermediate symlink directories
jkyberneees
committed
FIX #9: apply SSRF transport guard to web_search
jkyberneees
committed
FIX #10: classify git clone/fetch/pull as NetworkEgress
jkyberneees
committed
FIX #11: classify script interpreters and package-manager run/build as code execution

jkyberneees
and
claude
committed
FIX #12: protect ~/.odek/IDENTITY.md and scan it before trusting as system prompt

jkyberneees
and
claude
committed
FIX #13: wrap MCP tool descriptions as untrusted data, not just regex-scan them

jkyberneees
and
claude
committed
FIX #14: extract telegramVoiceMessage helper + regression test for transcript wrapping

jkyberneees
and
claude
committed

Commits on Jun 14, 2026