6a5c2ba53b
Unquoted \$ARGUMENTS in the ! shell commands allowed shell metacharacters in user-supplied job IDs to be expanded before Node received them (e.g., `task-123; malicious-cmd` would execute the trailing command). This is inconsistent with review.md and adversarial-review.md, which both wrap "$ARGUMENTS" in double quotes. Co-authored-by: claude[bot] <claude-bot@anthropic.com> Co-authored-by: Claude Code <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| adversarial-review.md | ||
| cancel.md | ||
| rescue.md | ||
| result.md | ||
| review.md | ||
| setup.md | ||
| status.md | ||