AlexisLeDain eddfeb6fbf fix(security): reject requests with missing/malformed auth header ...

The custom auth filter only rejected invalid tokens but silently
passed through requests without an Authorization header, creating
a complete auth bypass. Inverted the guard to reject-first: abort
immediately when header is absent or malformed, then validate.

2026-04-09 16:09:10 +02:00

..

agent-eval

security: remove supply chain risks, external promotions, and unauthorized credits

2026-03-21 18:10:05 -07:00

agent-harness-construction

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

agent-introspection-debugging

feat: add agent introspection debugging skill

2026-04-05 20:10:54 -07:00

agent-payment-x402

Update skills/agent-payment-x402/SKILL.md

2026-03-24 15:43:59 -05:00

agent-sort

feat: add agent-sort selective install workflow

2026-04-05 17:36:37 -07:00

agentic-engineering

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

ai-first-engineering

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

ai-regression-testing

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

android-clean-architecture

fix: address PR review comments for Kotlin/Android/KMP docs

2026-03-10 20:53:39 -07:00

api-connector-builder

feat: add connector and dashboard builder skills

2026-04-05 16:47:33 -07:00

api-design

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

architecture-decision-records

feat(skills): add architecture-decision-records skill (#555)

2026-03-20 00:20:25 -07:00

article-writing

refactor: consolidate writing voice rules

2026-04-02 15:45:19 -07:00

automation-audit-ops

feat: add ECC-native operator workflow skills

2026-04-05 16:31:26 -07:00

autonomous-agent-harness

fix: CI fixes, security audit, remotion skill, lead-intelligence, npm audit (#1039)

2026-03-31 15:08:55 -04:00

autonomous-loops

security: remove supply chain risks, external promotions, and unauthorized credits

2026-03-21 18:10:05 -07:00

backend-patterns

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

benchmark

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

blueprint

docs: tighten blueprint install guidance

2026-03-10 19:23:00 -07:00

brand-voice

feat(skills): add brand voice and network ops lanes

2026-04-01 19:41:03 -07:00

browser-qa

fix(skills): add missing YAML frontmatter to 7 skills

2026-03-28 20:06:42 -04:00

bun-runtime

fix: address PR review — skill template (When to use, How it works, Examples), bun.lock, next build note, rust-reviewer CI note, doc-lookup privacy/uncertainty

2026-03-16 14:03:40 -07:00

canary-watch

fix(skills): add missing YAML frontmatter to 7 skills

2026-03-28 20:06:42 -04:00

carrier-relationship-management

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

ck

fix: port safe ci cleanup from backlog

2026-04-01 16:09:54 -07:00

claude-api

feat: add orchestration workflows and harness skills

2026-03-12 14:49:05 -07:00

claude-devfleet

Add Claude DevFleet multi-agent orchestration skill (#505)

2026-03-16 13:35:50 -07:00

click-path-audit

feat: add click-path-audit skill — finds state interaction bugs (#729)

2026-03-22 15:40:55 -07:00

clickhouse-io

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

code-tour

feat: add code tour workflow

2026-04-05 15:42:58 -07:00

codebase-onboarding

feat(skills): add codebase-onboarding skill (#553)

2026-03-20 00:20:20 -07:00

coding-standards

docs: narrow coding standards scope

2026-04-05 20:05:50 -07:00

compose-multiplatform-patterns

docs: tighten kotlin support examples

2026-03-10 20:53:39 -07:00

configure-ecc

Update skills/configure-ecc/SKILL.md

2026-04-08 21:03:46 +02:00

connections-optimizer

refactor: extract social graph ranking core

2026-04-02 02:51:24 -07:00

content-engine

refactor: consolidate writing voice rules

2026-04-02 15:45:19 -07:00

content-hash-cache-pattern

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

context-budget

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

continuous-agent-loop

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

continuous-learning

docs: clean stale template references

2026-04-05 17:05:53 -07:00

continuous-learning-v2

fix: harden windows observer prompt handling

2026-04-06 14:05:38 -07:00

cost-aware-llm-pipeline

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

council

feat: add council decision workflow

2026-04-05 15:27:54 -07:00

cpp-coding-standards

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

cpp-testing

chore: replace external repo links with @username attribution

2026-03-03 12:32:35 -08:00

crosspost

refactor: consolidate writing voice rules

2026-04-02 15:45:19 -07:00

csharp-testing

feat: add C# and Dart language support

2026-04-02 17:48:43 -07:00

customer-billing-ops

feat: add connected operator workflow skills

2026-04-01 02:37:42 -07:00

customs-trade-compliance

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

dart-flutter-patterns

feat: add C# and Dart language support

2026-04-02 17:48:43 -07:00

dashboard-builder

feat: add connector and dashboard builder skills

2026-04-05 16:47:33 -07:00

data-scraper-agent

feat(skill): add data-scraper-agent — AI-powered public data collection for any source (#503)

2026-03-16 13:35:44 -07:00

database-migrations

feat(skills): add Kysely migration patterns to database-migrations (#731)

2026-03-22 15:40:53 -07:00

deep-research

feat: add orchestration workflows and harness skills

2026-03-12 14:49:05 -07:00

defi-amm-security

feat: add blockchain security skill bundle

2026-04-05 16:12:42 -07:00

deployment-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

design-system

fix(skills): add missing YAML frontmatter to 7 skills

2026-03-28 20:06:42 -04:00

django-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

django-security

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

django-tdd

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

django-verification

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

dmux-workflows

security: remove supply chain risks, external promotions, and unauthorized credits

2026-03-21 18:10:05 -07:00

docker-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

documentation-lookup

fix: address PR review — skill template (When to use, How it works, Examples), bun.lock, next build note, rust-reviewer CI note, doc-lookup privacy/uncertainty

2026-03-16 14:03:40 -07:00

dotnet-patterns

feat: add C# and Dart language support

2026-04-02 17:48:43 -07:00

e2e-testing

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

ecc-tools-cost-audit

feat: add ecc tools cost audit workflow

2026-04-05 15:19:56 -07:00

email-ops

feat: add ECC-native operator workflow skills

2026-04-05 16:31:26 -07:00

energy-procurement

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

enterprise-agent-ops

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

eval-harness

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

evm-token-decimals

feat: add blockchain security skill bundle

2026-04-05 16:12:42 -07:00

exa-search

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

fal-ai-media

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

finance-billing-ops

feat: add ECC-native operator workflow skills

2026-04-05 16:31:26 -07:00

flutter-dart-code-review

feat(agents): add flutter-reviewer agent and skill (#716)

2026-03-20 06:40:28 -07:00

foundation-models-on-device

fix(skills): improve code examples in iOS 26 skills

2026-02-24 14:39:25 +09:00

frontend-design

feat: salvage frontend-design from hermes branch

2026-04-05 17:48:46 -07:00

frontend-patterns

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

frontend-slides

chore: replace external repo links with @username attribution

2026-03-03 12:32:35 -08:00

gan-style-harness

fix: harden install planning and sync tracked catalogs

2026-03-31 22:57:48 -07:00

git-workflow

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

github-ops

feat: restore reusable ops skills from hermes branch

2026-04-05 13:30:55 -07:00

golang-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

golang-testing

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

google-workspace-ops

feat: add connected operator workflow skills

2026-04-01 02:37:42 -07:00

healthcare-cdss-patterns

fix: address Greptile review — frontmatter, CI safety, null guards

2026-03-27 04:02:44 +00:00

healthcare-emr-patterns

fix: address Greptile review — frontmatter, CI safety, null guards

2026-03-27 04:02:44 +00:00

healthcare-eval-harness

fix(docs): repair healthcare eval harness examples

2026-03-29 00:04:36 -04:00

healthcare-phi-compliance

fix: address Greptile review — frontmatter, CI safety, null guards

2026-03-27 04:02:44 +00:00

hexagonal-architecture

fix: port ci and markdown cleanup from backlog

2026-04-02 17:09:21 -07:00

hipaa-compliance

feat: add HIPAA entrypoint skill

2026-04-05 16:10:05 -07:00

hookify-rules

feat: restore reusable ops skills from hermes branch

2026-04-05 13:30:55 -07:00

inventory-demand-planning

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

investor-materials

feat: add generic content and investor skills

2026-02-27 05:50:23 -08:00

investor-outreach

refactor: consolidate writing voice rules

2026-04-02 15:45:19 -07:00

iterative-retrieval

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

java-coding-standards

add quarkus to java part

2026-04-08 16:24:27 +02:00

jira-integration

fix: restore markdownlint baseline on main

2026-04-02 18:05:27 -07:00

jpa-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

knowledge-ops

feat: restore reusable ops skills from hermes branch

2026-04-05 13:30:55 -07:00

kotlin-coroutines-flows

docs: tighten kotlin support examples

2026-03-10 20:53:39 -07:00

kotlin-exposed-patterns

feat: add kotlin commands and skill pack

2026-03-10 21:25:52 -07:00

kotlin-ktor-patterns

feat: add kotlin commands and skill pack

2026-03-10 21:25:52 -07:00

kotlin-patterns

feat: add kotlin commands and skill pack

2026-03-10 21:25:52 -07:00

kotlin-testing

fix: align kotlin diagnostics and heading hierarchy

2026-03-12 23:53:23 -07:00

laravel-patterns

feat: add laravel skills (#420)

2026-03-16 13:35:23 -07:00

laravel-plugin-discovery

fix(skills): align laravel plugin discovery docs

2026-03-28 20:41:45 -04:00

laravel-security

feat: add laravel skills (#420)

2026-03-16 13:35:23 -07:00

laravel-tdd

feat: add laravel skills (#420)

2026-03-16 13:35:23 -07:00

laravel-verification

fix(skills): add missing YAML frontmatter to 7 skills

2026-03-28 20:06:42 -04:00

lead-intelligence

refactor: extract social graph ranking core

2026-04-02 02:51:24 -07:00

liquid-glass-design

fix(skills): improve code examples in iOS 26 skills

2026-02-24 14:39:25 +09:00

llm-trading-agent-security

feat: add blockchain security skill bundle

2026-04-05 16:12:42 -07:00

logistics-exception-management

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

manim-video

feat(skills): add brand voice and network ops lanes

2026-04-01 19:41:03 -07:00

market-research

feat: add generic content and investor skills

2026-02-27 05:50:23 -08:00

mcp-server-patterns

docs: add capability surface selection guide

2026-04-06 14:21:28 -07:00

messages-ops

feat: add ECC-native operator workflow skills

2026-04-05 16:31:26 -07:00

nanoclaw-repl

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

nestjs-patterns

feat: add nestjs development patterns

2026-04-02 18:27:51 -07:00

nextjs-turbopack

fix: address PR review — skill template (When to use, How it works, Examples), bun.lock, next build note, rust-reviewer CI note, doc-lookup privacy/uncertainty

2026-03-16 14:03:40 -07:00

nodejs-keccak256

feat: add blockchain security skill bundle

2026-04-05 16:12:42 -07:00

nutrient-document-processing

security: remove supply chain risks, external promotions, and unauthorized credits

2026-03-21 18:10:05 -07:00

nuxt4-patterns

feat: add nuxt 4 patterns skill (#702)

2026-03-20 04:44:31 -07:00

openclaw-persona-forge

fix(skills): harden openclaw persona forge

2026-03-30 04:41:47 -04:00

opensource-pipeline

feat(agents,skills): add opensource-pipeline — 3-agent workflow for safe public releases (#1036)

2026-03-31 14:06:23 -07:00

perl-patterns

docs: tighten perl support guidance

2026-03-10 20:42:54 -07:00

perl-security

docs: tighten perl support guidance

2026-03-10 20:42:54 -07:00

perl-testing

feat: add Perl skills (patterns, security, testing)

2026-03-10 20:42:54 -07:00

plankton-code-quality

security: remove supply chain risks, external promotions, and unauthorized credits

2026-03-21 18:10:05 -07:00

postgres-patterns

chore: replace external repo links with @username attribution

2026-03-03 12:32:35 -08:00

product-capability

feat: add product capability planning lane

2026-04-05 16:58:02 -07:00

product-lens

docs: separate product lens from capability planning

2026-04-05 16:59:54 -07:00

production-scheduling

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

project-flow-ops

feat: add connected operator workflow skills

2026-04-01 02:37:42 -07:00

prompt-optimizer

fix: add Quarkus detection signal to Phase 0 in prompt-optimizer

2026-04-08 22:43:31 +02:00

python-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

python-testing

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

pytorch-patterns

feat(skills): add pytorch-patterns skill (#550)

2026-03-19 20:49:34 -07:00

quality-nonconformance

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

quarkus-patterns

fix: use Quarkus Platform Camel BOM instead of Apache Camel BOM

2026-04-09 16:05:28 +02:00

quarkus-security

fix(security): reject requests with missing/malformed auth header

2026-04-09 16:09:10 +02:00

quarkus-tdd

fix: resolve compile errors in quarkus code examples

2026-04-09 16:04:06 +02:00

quarkus-verification

add quarkus to java part

2026-04-08 16:24:27 +02:00

ralphinho-rfc-pipeline

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

regex-vs-llm-structured-text

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

remotion-video-creation

fix: port ci and markdown cleanup from backlog

2026-04-02 17:09:21 -07:00

repo-scan

fix(skills): tighten repo-scan install flow

2026-03-28 20:29:51 -04:00

research-ops

feat: add ECC-native operator workflow skills

2026-04-05 16:31:26 -07:00

returns-reverse-logistics

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

rules-distill

fix: narrow unicode cleanup scope

2026-03-29 21:21:18 -04:00

rust-patterns

fix: resolve Windows CI failures and markdown lint (#667)

2026-03-20 00:29:17 -07:00

rust-testing

feat(agents): add Rust language support (#523)

2026-03-16 13:34:25 -07:00

safety-guard

fix(skills): add missing YAML frontmatter to 7 skills

2026-03-28 20:06:42 -04:00

santa-method

feat(skills): add santa-method - multi-agent adversarial verification (#760)

2026-03-22 15:41:04 -07:00

search-first

feat: separate core vs niche skills and enforce research-first default

2026-02-28 10:06:43 -08:00

security-bounty-hunter

feat: add security bounty hunting skill

2026-04-05 16:13:53 -07:00

security-review

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

security-scan

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

seo

feat: add SEO audit support

2026-04-05 15:46:01 -07:00

skill-comply

feat(skills): add skill-comply — automated behavioral compliance measurement (#724)

2026-03-22 21:51:49 -07:00

skill-stocktake

fix: narrow unicode cleanup scope

2026-03-29 21:21:18 -04:00

social-graph-ranker

refactor: extract social graph ranking core

2026-04-02 02:51:24 -07:00

springboot-patterns

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

springboot-security

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

springboot-tdd

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

springboot-verification

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

strategic-compact

fix: narrow unicode cleanup scope

2026-03-29 21:21:18 -04:00

swift-actor-persistence

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

swift-concurrency-6-2

fix(skills): improve code examples in iOS 26 skills

2026-02-24 14:39:25 +09:00

swift-protocol-di-testing

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

swiftui-patterns

fix: correct SwiftUI skill ViewModel injection and Equatable comparison

2026-02-17 17:04:31 +02:00

tdd-workflow

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

team-builder

feat(team-builder): use claude agents command for agent discovery (#1021)

2026-03-31 14:05:20 -07:00

terminal-ops

feat: add ECC-native operator workflow skills

2026-04-05 16:31:26 -07:00

token-budget-advisor

fix(skills): clarify token-budget-advisor triggers

2026-03-29 00:20:04 -04:00

ui-demo

refactor: collapse legacy command bodies into skills

2026-04-01 02:25:42 -07:00

unified-notifications-ops

feat: add unified notifications ops

2026-04-05 15:33:26 -07:00

verification-loop

fix: add origin metadata to skills for traceability

2026-02-23 19:00:57 +03:00

video-editing

feat: add orchestration workflows and harness skills

2026-03-12 14:49:05 -07:00

videodb

fix: narrow unicode cleanup scope

2026-03-29 21:21:18 -04:00

visa-doc-translate

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

workspace-surface-audit

feat: add connected operator workflow skills

2026-04-01 02:37:42 -07:00

x-api

feat(skills): add brand voice and network ops lanes

2026-04-01 19:41:03 -07:00