From 0902bfafaa3bfef3a628b88ecfed3cf5d7710a66 Mon Sep 17 00:00:00 2001 From: shoko <270575765+shokollm@users.noreply.github.com> Date: Fri, 27 Mar 2026 02:44:05 +0000 Subject: [PATCH] docs(polymarket-browse): remove SECURITY.md - overhead for users/agents Security findings tracked in GitHub issues instead. --- skills/polymarket-browse/SECURITY.md | 25 ------------------------- 1 file changed, 25 deletions(-) delete mode 100644 skills/polymarket-browse/SECURITY.md diff --git a/skills/polymarket-browse/SECURITY.md b/skills/polymarket-browse/SECURITY.md deleted file mode 100644 index 5927bbb..0000000 --- a/skills/polymarket-browse/SECURITY.md +++ /dev/null @@ -1,25 +0,0 @@ -# Security Policy - -## Security Audit (2026-03-25) - -This document tracks security issues found during the 2026-03-25 audit. - -## Fixed Issues - -| Issue | Severity | Fixed Date | Fix | -|-------|----------|------------|-----| -| Telegram bot token in process command line | CRITICAL | 2026-03-25 | Switched to Python urlopen from curl subprocess | -| HTML injection in Telegram messages | HIGH | 2026-03-25 | Added escape_html() function | -| Insufficient --search URL encoding | MEDIUM | 2026-03-26 | Use urllib.parse.quote() | -| --detail bounds not validated | MEDIUM | 2026-03-26 | Error on out of range | -| No response size limits | MEDIUM | 2026-03-26 | MAX_RESPONSE_SIZE check | -| Bare except: clauses | LOW | 2026-03-26 | Catch specific exceptions | -| No API rate limiting | LOW | 2026-03-26 | TokenBucket rate limiter | - -## Open Issues - -All security issues from this audit have been addressed in subsequent releases. - -## Reporting Security Issues - -If you find a security vulnerability, please report it by opening an issue.