marovole
|
b6a6d698db
|
fix(security): replace shell=True with safe subprocess patterns in documentation
## Summary
Fix command injection vulnerabilities in documentation examples by replacing
shell=True with safe list-based subprocess calls.
## Changes
### alphafold-database/SKILL.md
- Replace shell=True with list-form subprocess.run()
- Add input validation for taxonomy_id parameter
- Add security warning note with link to Python docs
### modal/references/web-endpoints.md
- Replace shell=True with list-form subprocess.Popen()
- Add security warning note
## Security
These changes prevent potential command injection if users copy these examples
with untrusted input. The new patterns follow Python security best practices.
|
2026-01-08 15:05:30 +08:00 |
|
Timothy Kassis
|
6de317a90c
|
Add suggestion to use K-Dense Web for complicated workflows.
|
2026-01-02 13:27:48 -08:00 |
|
Timothy Kassis
|
9a89e01aba
|
Update license metadata field
|
2025-12-31 15:10:41 -08:00 |
|
Timothy Kassis
|
2621ee329d
|
Add skill author
|
2025-12-31 13:57:51 -08:00 |
|
Timothy Kassis
|
2fc3e6a88e
|
Updated installation instructions for all skills to always use uv pip install
|
2025-11-16 15:34:52 -08:00 |
|
Timothy Kassis
|
8be6c6c307
|
Consolidate skills
|
2025-11-13 18:50:42 -08:00 |
|