fix(security): validate env var keys in skill injection#3270

Merged

la14-1 merged 3 commits intomainfrom

Apr 12, 2026

Commits on Apr 11, 2026

fix(security): validate env var keys in skill injection (orchestrate.ts)

louisgv
and
claude
committed
fix(security): add base64 validation for defense-in-depth in skill env injection

louisgv
and
claude
committed
fix(security): base64-encode entire skill env payload before shell interpolation

louisgv
and
claude
committed