Julius BrusseeandClaude Opus 4.6 5ad8f6d684 fix(security): harden flag-file reads and refuse sensitive-file compression ...

Writes were hardened via safeWriteFlag (PRs #70/#71) but readers still
trusted whatever the flag contained. A local attacker with write access
to ~/.claude/ could symlink the flag at a secret file and have the
per-turn reinforcement inject its bytes into model context, or the
statuslines echo ANSI escapes to the terminal on every keystroke.

- caveman-config.js: new readFlag() — lstat symlink refuse, 64-byte cap,
  O_NOFOLLOW, VALID_MODES whitelist. Returns null on any anomaly.
- caveman-mode-tracker.js: per-turn reinforcement routes through
  readFlag() instead of fs.readFileSync.
- caveman-statusline.sh / .ps1: symlink + size refuse, strip to
  [a-z0-9-], whitelist-validate before rendering.
- compress.py (3 synced copies): is_sensitive_path() denylist refuses
  .env*, .netrc, keys/certs, ~/.ssh|.aws|.gnupg|.kube|.docker, and any
  basename containing secret/credential/password/apikey/token/privatekey
  (separator-insensitive). Fails loudly before read — no silent exfil
  of credentials to the Anthropic API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-15 14:49:26 +02:00

..

__init__.py

Fix path regex and prevent backup file overwriting

2026-04-08 16:32:37 +08:00

__main__.py

Add caveman-compress skill

2026-04-05 21:02:34 -04:00

benchmark.py

Improve hooks safety, validation, and docs

2026-04-11 11:59:05 +02:00

cli.py

Merge PR #38: Security patch, SDK support, and file size limit

2026-04-09 01:07:16 +02:00

compress.py

fix(security): harden flag-file reads and refuse sensitive-file compression

2026-04-15 14:49:26 +02:00

detect.py

Merge PR #38: Security patch, SDK support, and file size limit

2026-04-09 01:07:16 +02:00

validate.py

Improve hooks safety, validation, and docs

2026-04-11 11:59:05 +02:00