standards

Tool passed security scan

Risky tool definition detected

Tool: standards/references/common-standards.md [3/4] Description: | `realpath "$user_path" | grep -q "^$base_dir" || exit 1` | **Key rules:** - Always resolve BEFORE checking — `../` sequences bypass naive prefix checks - Block null bytes (`\0`) in file paths — some runtimes truncate at null - Reject absolute paths in user input when relative paths are expected ### Logging Security | Rule | Description | |------|-------------| | Never log passwords | Hash or mask credentials before any log state

Tool passed security scan

Tool passed security scan