fix: added path validation for skill names

2026-06-03 14:59:57 -06:00
parent 7ec81ae607
commit 9879980304
3 changed files with 57 additions and 0 deletions
@@ -2584,6 +2584,7 @@ impl RequestContext {
    }

    pub fn upsert_skill(&self, app: &AppConfig, name: &str) -> Result<()> {
+        paths::validate_skill_name(name)?;
        let path = paths::skill_file(name);
        ensure_parent_exists(&path)?;
        let is_new = !path.exists();
@@ -2602,6 +2603,7 @@ impl RequestContext {
    }

    pub async fn load_skill_repl(&mut self, name: &str, abort_signal: AbortSignal) -> Result<()> {
+        paths::validate_skill_name(name)?;
        if !self.app.config.function_calling_support {
            bail!(
                "Skills require function calling, which is disabled. Enable function calling in your config then try again."