Files
masaya ishihara d9747eaf60 feat: add evaluate-session skill (by Gunshima) (#115)
* feat: add evaluate-session skill (by Gunshima) to common-development

郡嶋開発のセッション効率評価Webツールをcommon_developmentプラグインに追加。
Node.js Web UIでセッションログを7観点100点満点でスコアリングし、改善提案を出力する。
利用ガイド(docs/session-evaluator-guide.md)も作成。

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: address security review findings in session-evaluator

- Critical: Add path traversal prevention (validate ~/.claude/ prefix)
- Major: Use unique temp file names to prevent race conditions
- Major: Remove unnecessary shell: true from spawn

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: validate both jsonlPath and folderPath individually, add sessions endpoint path validation

- Critical: Validate jsonlPath and folderPath separately to prevent bypass
- Major: Add path traversal protection to /api/sessions/:projectEncoded

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-16 16:04:37 +09:00
..