4 commits

Author	SHA1	Message	Date
Dennis-yxchen	c49696ed7d	Fix cloud visibility compatibility	2026-04-09 22:36:09 +08:00
spidercatfly	e1a8524475	feat: migrate cloud search to server-side embedding endpoint	2026-04-02 23:17:44 +08:00
Dennis-yxchen	f845c5f7fb	fix(security): harden zip extraction and import_skill against path traversal ... - Add resolve() + is_relative_to() check in _extract_zip() to block nested traversal entries like nested/../../escape.txt - Sanitize server-provided skill name in import_skill() to prevent directory escape via malicious record metadata - Add 6 regression tests covering both attack vectors Closes #17 Co-authored-by: LeftX <xzq-xu@users.noreply.github.com>	2026-03-31 16:23:56 +08:00
spidercatfly	6ff4861f88	initial commit	2026-03-24 16:03:22 +08:00