Miguel Ángel 041f2fa196 fix(media-use): kill shell command injection in probe/heygen-search/eval ...

Swap execSync(<shell-string>) → execFileSync(file, [argv]) in probe.mjs, heygen-search.mjs, and eval.mjs so hostile filenames / queries / manifest metadata can't inject shell. Adds probe.test.mjs regression guard and a CI Test (skills) job so it actually runs. Closes the media-use High/Critical scanner alert.

2026-06-25 15:16:52 -04:00

2.9 KiB

Raw Permalink Blame History

View Raw