mirror of
https://github.com/davila7/claude-code-templates.git
synced 2026-09-19 01:30:23 +08:00
948e1b85aa
Untrusted category/top/max_quality inputs were interpolated directly into bash. Route them through env vars and a quoted bash array so they cannot execute shell code. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WFn7YA1uEgrNdzXyvnLwy5