Javier Calvarro Nelson ae812a7e8c Harden MCP server handling: null-guard IsAllowedMcpCommand and add Url field ...

- Make MCPServerDef.Command and Args nullable to match JSON deserialization reality
- Add MCPServerDef.Url field for HTTP/SSE/streamable-http transport types
- Null-guard IsAllowedMcpCommand to prevent NullReferenceException
- Null-guard SanitizeMcpArgs for defense-in-depth

This ensures the validator doesn't crash when plugins declare non-stdio MCP
servers (e.g., type: 'http' or type: 'local') which have no Command field.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-05-22 13:22:44 +02:00

..

dashboard

Dashboards series fix (followup) (#587)

2026-04-27 09:40:45 +02:00

skill-coverage

Add skill coverage measurement tool (#509)

2026-04-16 19:31:55 +02:00

skill-validator

Harden MCP server handling: null-guard IsAllowedMcpCommand and add Url field

2026-05-22 13:22:44 +02:00

vally-adapter

Fix vally eval isolation: pin baseline to 0 skills, skilled to 1 (#662)

2026-05-18 12:30:02 +00:00

allowed-external-deps.txt

Add dotnet-blazor plugin with activation fixes from PR #357

2026-05-22 13:22:43 +02:00

known-domains.txt

Update .NET 10→11 migration skill for Preview 2 and 3 (#628)

2026-05-11 19:29:36 +00:00