📦 deps(thirdparty): update snapshots

antigravity-awesome-skills/plugins/antigravity-bundle-full-stack-developer/skills/senior-fullstack/scripts/code_quality_analyzer.py

@@ -9,13 +9,26 @@ import sys
 import json
 import argparse
 from pathlib import Path
+
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
 from typing import Dict, List, Optional
 
 class CodeQualityAnalyzer:
     """Main class for code quality analyzer functionality"""
     
     def __init__(self, target_path: str, verbose: bool = False):
-        self.target_path = Path(target_path)
+        self.target_path = safe_user_path(target_path)
         self.verbose = verbose
         self.results = {}
     
@@ -104,7 +117,7 @@ def main():
     if args.json:
         output = json.dumps(results, indent=2)
         if args.output:
-            with open(args.output, 'w') as f:
+            with safe_user_path(args.output).open('w') as f:
                 f.write(output)
             print(f"Results written to {args.output}")
         else:

antigravity-awesome-skills/plugins/antigravity-bundle-full-stack-developer/skills/senior-fullstack/scripts/fullstack_scaffolder.py

@@ -9,13 +9,26 @@ import sys
 import json
 import argparse
 from pathlib import Path
+
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
 from typing import Dict, List, Optional
 
 class FullstackScaffolder:
     """Main class for fullstack scaffolder functionality"""
     
     def __init__(self, target_path: str, verbose: bool = False):
-        self.target_path = Path(target_path)
+        self.target_path = safe_user_path(target_path)
         self.verbose = verbose
         self.results = {}
     
@@ -104,7 +117,7 @@ def main():
     if args.json:
         output = json.dumps(results, indent=2)
         if args.output:
-            with open(args.output, 'w') as f:
+            with safe_user_path(args.output).open('w') as f:
                 f.write(output)
             print(f"Results written to {args.output}")
         else:

antigravity-awesome-skills/plugins/antigravity-bundle-full-stack-developer/skills/senior-fullstack/scripts/project_scaffolder.py

@@ -9,13 +9,26 @@ import sys
 import json
 import argparse
 from pathlib import Path
+
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
 from typing import Dict, List, Optional
 
 class ProjectScaffolder:
     """Main class for project scaffolder functionality"""
     
     def __init__(self, target_path: str, verbose: bool = False):
-        self.target_path = Path(target_path)
+        self.target_path = safe_user_path(target_path)
         self.verbose = verbose
         self.results = {}
     
@@ -104,7 +117,7 @@ def main():
     if args.json:
         output = json.dumps(results, indent=2)
         if args.output:
-            with open(args.output, 'w') as f:
+            with safe_user_path(args.output).open('w') as f:
                 f.write(output)
             print(f"Results written to {args.output}")
         else: