claude-skills/engineering/hivemind
Claude dfa3dd2dc2
fix(hivemind): justify child_process imports for the security audit gate
The Skill Security Audit failed PR #984 with 2 CRITICAL CMD-INJECT findings
on hivemind's Node scripts — pre-existing since #979 merged while Actions
wasn't triggering; touching the skill's agent files pulled it into audit
scope. Spawning headless opencode worker processes is this skill's core,
documented function (SKILL.md Prerequisites + the PR #979 dependency
disclosure), so the imports carry the auditor's own suppression directive
with the justification inline. Re-audit: PASS, 0 critical / 0 high.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qgc6RYXWJPr5oW9DHU7zR4
2026-08-24 20:36:41 +00:00
..
assets release: v2.12.0 — consolidated release notes, version bump, docs-site regeneration 2026-08-24 20:35:06 +00:00
scripts fix(hivemind): justify child_process imports for the security audit gate 2026-08-24 20:36:41 +00:00
.gitignore feat(engineering): add hivemind orchestration skill 2026-08-23 19:39:42 +05:30
LICENSE.txt fix(engineering): tighten hivemind description and harden server spawn 2026-08-23 20:06:43 +05:30
SKILL.md fix(engineering): tighten hivemind description and harden server spawn 2026-08-23 20:06:43 +05:30