diff --git a/.changeset/validate-skill-names.md b/.changeset/validate-skill-names.md deleted file mode 100644 index 330780281..000000000 --- a/.changeset/validate-skill-names.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"ctx7": patch ---- - -Harden skill name handling during `ctx7 skills install` and `ctx7 skills remove`. Skill names from remote `SKILL.md` files are now restricted to a safe character set, and the install sinks assert the target directory is a direct child of the skills root before writing. diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 544ee25ee..356057c53 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,11 @@ # Changelog +## 0.4.3 + +### Patch Changes + +- 61de754: Harden skill name handling during `ctx7 skills install` and `ctx7 skills remove`. Skill names from remote `SKILL.md` files are now restricted to a safe character set, and the install sinks assert the target directory is a direct child of the skills root before writing. + ## 0.4.2 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index f3b5552fc..76d796118 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "ctx7", - "version": "0.4.2", + "version": "0.4.3", "description": "Context7 CLI - Manage AI coding skills and documentation context", "type": "module", "bin": {