Loader Skill (clean)
Loads its bundled configuration with json.load and yaml.safe_load, neither of which can
construct arbitrary Python objects from the file contents.
Loads a bundled config file with json.load and yaml.safe_load — no deserialization code-exec surface.
npx skillmds@latest add gl0di/loader-2 Loads its bundled configuration with json.load and yaml.safe_load, neither of which can
construct arbitrary Python objects from the file contents.
gl0di/clawseccheck/tree/main/fixtures/clean_b92_safe_load/skills/loader commit 00eb472c0e