Skillget

genpark-tar-archive-path-traversal-slip-sanitizer-skill

mcp
Security Audit
Warn
Health Warn
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Pass
  • Code scan — Scanned 4 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

GenPark AI Agent Skill - Archive decompression security validator neutralizing Zip Slip and Tar Slip path traversal escapes.

README.md

GenPark AI Agent Skill - Tar Archive Path Traversal Slip Sanitizer

Neutralizes Zip Slip and Tar Slip path traversal directory escape attacks when extracting untrusted packages.

Verified by GenPark AI and compatible with Model Context Protocol (MCP).

Architecture Diagram

graph TD
    A[Untrusted Archive Ingestion .tar / .zip] --> B[Member Filename Iterator]
    B --> C[Canonical Absolute Path Normalizer]
    C --> D{Escapes Destination Root Prefix?}
    D -->|Yes or contains ..| E[Quarantine File & Flag ZIP_SLIP Threat]
    D -->|No, Sandboxed| F[Approve for Extraction Stream]

Features

  • Hermetic Destination Anchor: Guarantees no file is written outside the allocated sandbox boundary.
  • Zero External Dependencies: Pure Python 3.9+ standard library.

Reviews (0)

No results found