command-path-safety

# Command Path Safety Treat commands and paths as structured, validated inputs. ## Workflow Routing | Workflow | Trigger | File | |---------|---------|------| | **HardenCommandExecution** | "command injection", "shell safety", "exec hardening", "safe subprocess" | `Workflows/HardenCommandExecution.md` | | **EnforcePathBoundaries** | "path traversal", "zip slip", "installer safety", "path boundaries" | `Workflows/EnforcePathBoundaries.md` | ## SkillSearch - Command injection guidance: `SkillSearch('command path safety command injection patterns')` → loads `CommandInjectionPatterns.md` - Path and installer guidance: `SkillSearch('command path safety path traversal installer safety')` → loads `PathTraversalAndInstallerSafety.md` ## Use This Skill To - Replace shell interpolation with validated structured execution. - Enforce path roots for writes, extraction, and installer operations. - Review archive and installer behavior for traversal and boundary escapes. ## Not This Skill - Not for exploit scanning, malware analysis, or final security verdicts. - Hand off to @aegis for deep audits, exploitability assessment, or repo-wide review.