wuyang/zk-data-agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
334 Commits 2 Branches 0 Tags
712bccf8141750a767a158e6680201122af8c02e
Commit Graph

110 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] 696f272b88 Add comprehensive security tests for agent_tools.py 
- Add 26 tests covering _resolve_path, _ensure_shell_allowed, and
  _is_sensitive_env_var across path traversal, destructive command
  blocking, and secret-name detection.
- Fix bug in _ensure_shell_allowed: regex patterns for chmod -R and
  chown -R used uppercase -R but the command is lowered before matching,
  so these patterns never matched. Changed to lowercase -r.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com>
 2026-04-05 16:14:22 +00:00
copilot-swe-agent[bot] 94cf05abf9 improve env variable filtering with keyword-based matching 
Use keyword-based matching (SECRET, TOKEN, PASSWORD, etc.) instead of
prefix-based matching for more comprehensive sensitive env var filtering.

Agent-Logs-Url: https://github.com/HarnessLab/claw-code-agent/sessions/94dfb41f-57dd-48ea-ab0d-d2f2249ef950

Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com>
 2026-04-05 11:04:41 +00:00
copilot-swe-agent[bot] 93de5ca4f8 fix: address security vulnerabilities and code quality weaknesses 
- Fix path traversal in _glob_search by validating resolved paths stay within workspace root
- Fix ReDoS vulnerability in _grep_search by adding regex compilation error handling
- Replace 6 assert statements with explicit validation (assertions are disabled with -O flag)
- Replace bare except Exception with specific exception types (OSError, KeyError, ValueError)
- Block file:// scheme in web_fetch to prevent SSRF attacks
- Filter sensitive environment variables from subprocess execution
- Update test to verify file:// scheme rejection

Agent-Logs-Url: https://github.com/HarnessLab/claw-code-agent/sessions/94dfb41f-57dd-48ea-ab0d-d2f2249ef950

Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com>
 2026-04-05 11:03:09 +00:00
Abdelrahman Abdallah 783145fe6a add mcp and online search 2026-04-05 02:35:49 +02:00
Abdelrahman Abdallah 3f31cee395 add claw-code-agent/src/plan_runtime.py and claw-code-agent/src/background_runtime.py. The agent now has a real 
persistent plan runtime with update_plan, plan_get, and plan_clear, plus plan-to-task sync wired through claw-code-agent/src/
  agent_tools.py, claw-code-agent/src/agent_runtime.py, claw-code-agent/src/agent_context.py, claw-code-agent/src/agent_prompting.py, and claw-code-agent/src/
  agent_slash_commands.py. New local plan slash commands are /plan and /planner.
 2026-04-03 18:31:25 +02:00
Abdelrahman Abdallah 4de3da10e4 add test guide cases 2026-04-03 16:50:19 +02:00
Abdelrahman Abdallah 5ad10c660c add File-history snapshot ids and replay summaries for file edits 2026-04-02 22:19:32 +02:00
Abdelrahman Abdallah 9d90d6a10a add ىثص ؤخقث شلثىف قعىفهةث 2026-04-02 22:08:24 +02:00
Abdelrahman Abdallah 2c6763eb08 add new agent components 2026-04-02 21:12:48 +02:00
Abdelrahman Abdallah 27aff5611b first commit 2026-04-01 21:51:49 +02:00