chore: repo hygiene and security hardening - #11

Closed

mkultraWasHere wants to merge 8 commits into

mainfrom

chore/repo-hygiene

Commits on Aug 19, 2026

chore: repo hygiene — versioning, licensing, privacy, PDF download

mkultraWasHere
and
claude
committed
22edf83
fix(web): add SSRF protection to web_fetch and Brave search

mkultraWasHere
and
claude
committed
3d24116
fix(validate): pass paper path via sys.argv to prevent injection

mkultraWasHere
and
claude
committed
ad831fa
fix(security): denylist dangerous commands and disable latexmk RC files

mkultraWasHere
and
claude
committed
2018253
fix: SSRF redirect validation, PDF download name, template extra_files

mkultraWasHere
and
claude
committed
4725172
fix(security): scrub credentials from command subprocess env

mkultraWasHere
and
claude
committed
dcfd9c7
docs: add security section to README

mkultraWasHere
and
claude
committed
55cbbb7
style: ruff format and merge duplicate import

mkultraWasHere
and
claude
committed
d01365d