safishamsiandClaude Opus 4.8 8595749021 security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference ...

Completes #3742: the Step 1 fix closed the .graphify_root shell line, but
the progressive-disclosure add-watch reference still passed the raw,
agent-substituted INPUT_PATH placeholder unquoted into a bash command
($(cat .graphify_python) -m graphify.watch INPUT_PATH), the same
injection class - a scan root like $(...) / ; rm ... would execute.

The watcher targets the folder graphify already extracted, so read the
trusted graphify-out/.graphify_root that Step 1 resolves (the same
sidecar pattern this reference already uses for .graphify_python)
instead of re-substituting the untrusted placeholder. Regenerated all
14 host add-watch artifacts + expected/ snapshots; monolith-roundtrip
and always-on-roundtrip stay green (cores untouched).

The identical sink in the aider/devin monolith cores is tracked
separately (editing a core requires a gen.py sanctioned-diff).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-09-25 16:07:51 +01:00

..

graphify__always_on__agents-md.md

fix(skillgen): host-generic /graphify install guidance (#1530)

2026-06-29 10:01:06 +01:00

graphify__always_on__antigravity-rules.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__always_on__claude-md.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__always_on__gemini-md.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__always_on__kiro-steering.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__always_on__vscode-instructions.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skill-agents.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-aider.md

fix(hyperedge,skill): merge/load hyperedge integrity + community labels; bump to 0.9.34

2026-08-05 22:08:29 +01:00

graphify__skill-amp.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-claw.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-codex.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-copilot.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-devin.md

fix(hyperedge,skill): merge/load hyperedge integrity + community labels; bump to 0.9.34

2026-08-05 22:08:29 +01:00

graphify__skill-droid.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-kilo.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-kiro.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-opencode.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-pi.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-trae.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-vscode.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill-windows.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skill.md

Regenerate skill artifacts for the Step 1 injection fix

2026-09-25 16:01:53 +01:00

graphify__skills__agents__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__agents__references__exports.md

feat(install): add cross-framework agents platform (+ skills alias)

2026-06-23 17:26:49 +01:00

graphify__skills__agents__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__agents__references__github-and-merge.md

feat(install): add cross-framework agents platform (+ skills alias)

2026-06-23 17:26:49 +01:00

graphify__skills__agents__references__hooks.md

feat(install): add cross-framework agents platform (+ skills alias)

2026-06-23 17:26:49 +01:00

graphify__skills__agents__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__agents__references__transcribe.md

feat(install): add cross-framework agents platform (+ skills alias)

2026-06-23 17:26:49 +01:00

graphify__skills__agents__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__amp__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__amp__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__amp__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__amp__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__amp__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__amp__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__amp__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__amp__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__claude__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__claude__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__claude__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__claude__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__claude__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__claude__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__claude__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__claude__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__claw__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__claw__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__claw__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__claw__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__claw__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__claw__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__claw__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__claw__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__codex__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__codex__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__codex__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__codex__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__codex__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__codex__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__codex__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__codex__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__copilot__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__copilot__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__copilot__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__copilot__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__copilot__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__copilot__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__copilot__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__copilot__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__droid__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__droid__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__droid__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__droid__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__droid__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__droid__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__droid__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__droid__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__kilo__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__kilo__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__kilo__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__kilo__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__kilo__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__kilo__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__kilo__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__kilo__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__kiro__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__kiro__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__kiro__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__kiro__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__kiro__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__kiro__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__kiro__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__kiro__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__opencode__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__opencode__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__opencode__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__opencode__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__opencode__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__opencode__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__opencode__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__opencode__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__pi__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__pi__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__pi__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__pi__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__pi__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__pi__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__pi__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__pi__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__trae__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__trae__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__trae__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__trae__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__trae__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__trae__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__trae__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__trae__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__vscode__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__vscode__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__vscode__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__vscode__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__vscode__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__vscode__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__vscode__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__vscode__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00

graphify__skills__windows__references__add-watch.md

security(skillgen): neutralize the --watch INPUT_PATH sink in add-watch reference

2026-09-25 16:07:51 +01:00

graphify__skills__windows__references__exports.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__windows__references__extraction-spec.md

fix(ids): node IDs include the full repo-relative path (#1504, #1509)

2026-06-28 16:57:00 +01:00

graphify__skills__windows__references__github-and-merge.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__windows__references__hooks.md

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

graphify__skills__windows__references__query.md

fix(skill): utf-8 encoding in query reference snippets (#1619 A2)

2026-07-03 11:37:22 +01:00

graphify__skills__windows__references__transcribe.md

Fix remaining #1392 skill bugs: --directed propagation, content-only semantic scope, cache staleness, video update, transcribe robustness

2026-06-19 15:37:11 +01:00

graphify__skills__windows__references__update.md

fix(skillgen): stamp only produced-output files in the update runbook (#2015)

2026-07-20 13:30:26 +01:00