Skip to content

GH#4006: Harden shell injection defenses in tools.mjs - #4019

Merged
marcusquinn merged 7 commits into
mainfrom
fix/issue-4006-tools-mjs-quality-debt
Mar 10, 2026
Merged

GH#4006: Harden shell injection defenses in tools.mjs#4019
marcusquinn merged 7 commits into
mainfrom
fix/issue-4006-tools-mjs-quality-debt

fix: harden HOOK_ACTION_MAP against prototype pollution

9a84843
Select commit
Loading
Failed to load commit list.
Codacy Production / Codacy Static Code Analysis required action Mar 10, 2026 in 0s

1 new issue (0 max.) of at least severity.

Codacy Here is an overview of what got changed by this pull request:

Issues
======
- Added 1
           

Complexity increasing per file
==============================
- .agents/plugins/opencode-aidevops/tools.mjs  9
         

See the complete overview on Codacy

Annotations

Check failure on line 224 in .agents/plugins/opencode-aidevops/tools.mjs

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

.agents/plugins/opencode-aidevops/tools.mjs#L224

Detected calls to child_process from a function argument `action`. This could lead to a command injection if the input is user controllable.