Block a user
shoko
created branch fix/issue-4-telegram-token-refactor in shoko/jujutsu-skills
2026-03-25 12:07:18 +01:00
[SECURITY] CRITICAL: Telegram bot token visible in process command line
browse.py has 3 duplicate time functions doing similar things
browse.py print_browse() and send_to_telegram() too long
browse.py has long lines throughout (target max 120 chars)
SKILL.md: Missing 1-indexed --detail argument clarification
SKILL.md: Missing documentation (troubleshooting, examples, changelog, credits)
[SECURITY] HIGH: HTML injection in Telegram messages
[SECURITY] LOW: No rate limiting on API calls
[SECURITY] LOW: Bare except: clauses swallow security-relevant errors
[SECURITY] MEDIUM: No response size limits - potential memory exhaustion
[SECURITY] MEDIUM: --detail argument silently defaults when out of range
[SECURITY] MEDIUM: Insufficient URL encoding on --search parameter
[SECURITY] HIGH: HTML injection in Telegram messages