mirror of
https://github.com/xtone/ai_development_tools.git
synced 2026-09-14 20:07:12 +08:00
d9747eaf60
* feat: add evaluate-session skill (by Gunshima) to common-development 郡嶋開発のセッション効率評価Webツールをcommon_developmentプラグインに追加。 Node.js Web UIでセッションログを7観点100点満点でスコアリングし、改善提案を出力する。 利用ガイド(docs/session-evaluator-guide.md)も作成。 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: address security review findings in session-evaluator - Critical: Add path traversal prevention (validate ~/.claude/ prefix) - Major: Use unique temp file names to prevent race conditions - Major: Remove unnecessary shell: true from spawn Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: validate both jsonlPath and folderPath individually, add sessions endpoint path validation - Critical: Validate jsonlPath and folderPath separately to prevent bypass - Major: Add path traversal protection to /api/sessions/:projectEncoded Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>