Autumn-27
338e77c064
- 补上 bzip2 / Zstandard 解压器(标准库 + 已有的 klauspost/compress,不引新依赖), 不再对压缩软件非默认档位打出的包抛 "zip: unsupported compression"; Deflate64/LZMA/XZ/PPMd 等真解不了的方式与加密包改为解压前给出中文提示, 点名文件、压缩方式与重新打包的办法 - 技能内文件路径校验从 [A-Za-z0-9-_./] 的 ASCII 白名单改为 Unicode 黑名单: 放行各语言文件名与空格,仍拒绝控制字符、非法 UTF-8、零宽与双向控制字符、 \ % # ? * : " < > | 及 .. / 绝对路径 / 空路径段,防目录穿越行为不变 - 技能名放开非 ASCII 字母数字(中文可直接作技能名),ASCII 仍守 agentskills.io 规范,空格、点与路径分隔符照旧拒绝 - Windows 压缩软件按 GBK 写的文件名兜底解码后再校验;frontmatter 的 name: "中文技能" 去引号 - 新增 8 个测试:zstd 包、GBK 包、不支持的压缩方式、加密包、目录穿越、名称与 路径校验
62 lines
2.6 KiB
AMPL
62 lines
2.6 KiB
AMPL
module github.com/Autumn-27/artex
|
|
|
|
go 1.26.3
|
|
|
|
require (
|
|
github.com/Autumn-27/norma v0.3.2
|
|
github.com/golang-jwt/jwt/v5 v5.3.1
|
|
github.com/jackc/pgx/v5 v5.10.0
|
|
github.com/klauspost/compress v1.18.6
|
|
github.com/lqqyt2423/go-mitmproxy v1.9.2
|
|
github.com/miekg/dns v1.1.72
|
|
github.com/projectdiscovery/dnsx v1.2.3
|
|
golang.org/x/crypto v0.54.0
|
|
golang.org/x/net v0.56.0
|
|
golang.org/x/text v0.40.0
|
|
modernc.org/sqlite v1.52.0
|
|
)
|
|
|
|
require (
|
|
github.com/andybalholm/brotli v1.2.1 // indirect
|
|
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
|
|
github.com/aymerick/douceur v0.2.0 // indirect
|
|
github.com/creack/pty v1.1.24 // indirect
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/gaissmai/bart v0.26.0 // indirect
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/gorilla/css v1.0.1 // indirect
|
|
github.com/gorilla/websocket v1.5.3 // indirect
|
|
github.com/hinshun/vt10x v0.0.0-20220301184237-5011da428d02 // indirect
|
|
github.com/jackc/pgpassfile v1.0.0 // indirect
|
|
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
|
|
github.com/jackc/puddle/v2 v2.2.2 // indirect
|
|
github.com/kr/pretty v0.3.1 // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/microcosm-cc/bluemonday v1.0.27 // indirect
|
|
github.com/ncruces/go-strftime v1.0.0 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/projectdiscovery/blackrock v0.0.1 // indirect
|
|
github.com/projectdiscovery/cdncheck v1.2.13 // indirect
|
|
github.com/projectdiscovery/retryabledns v1.0.111 // indirect
|
|
github.com/projectdiscovery/utils v0.7.3 // indirect
|
|
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
|
|
github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d // indirect
|
|
github.com/satori/go.uuid v1.2.0 // indirect
|
|
github.com/sirupsen/logrus v1.9.4 // indirect
|
|
github.com/tidwall/gjson v1.18.0 // indirect
|
|
github.com/tidwall/match v1.2.0 // indirect
|
|
github.com/tidwall/pretty v1.2.1 // indirect
|
|
github.com/weppos/publicsuffix-go v0.40.3-0.20250408071509-6074bbe7fd39 // indirect
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
go.uber.org/multierr v1.11.0 // indirect
|
|
golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8 // indirect
|
|
golang.org/x/mod v0.40.0 // indirect
|
|
golang.org/x/sync v0.22.0 // indirect
|
|
golang.org/x/sys v0.47.0 // indirect
|
|
golang.org/x/tools v0.47.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
modernc.org/libc v1.72.3 // indirect
|
|
modernc.org/mathutil v1.7.1 // indirect
|
|
modernc.org/memory v1.11.0 // indirect
|
|
) |