Skillget

genpark-tar-archive-path-traversal-slip-sanitizer-skill

mcp
Guvenlik Denetimi
Uyari
Health Uyari
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Gecti
  • Code scan — Scanned 4 files during light audit, no dangerous patterns found
Permissions Gecti
  • Permissions — No dangerous permissions requested

Bu listing icin henuz AI raporu yok.

SUMMARY

GenPark AI Agent Skill - Archive decompression security validator neutralizing Zip Slip and Tar Slip path traversal escapes.

README.md

GenPark AI Agent Skill - Tar Archive Path Traversal Slip Sanitizer

Neutralizes Zip Slip and Tar Slip path traversal directory escape attacks when extracting untrusted packages.

Verified by GenPark AI and compatible with Model Context Protocol (MCP).

Architecture Diagram

graph TD
    A[Untrusted Archive Ingestion .tar / .zip] --> B[Member Filename Iterator]
    B --> C[Canonical Absolute Path Normalizer]
    C --> D{Escapes Destination Root Prefix?}
    D -->|Yes or contains ..| E[Quarantine File & Flag ZIP_SLIP Threat]
    D -->|No, Sandboxed| F[Approve for Extraction Stream]

Features

  • Hermetic Destination Anchor: Guarantees no file is written outside the allocated sandbox boundary.
  • Zero External Dependencies: Pure Python 3.9+ standard library.

Yorumlar (0)

Sonuc bulunamadi