fix(security): restrict skill download target paths

This commit is contained in:
Peter Steinberger
2026-02-16 03:46:32 +01:00
parent c6c53437f7
commit 2363e1b085
9 changed files with 442 additions and 324 deletions

View File

@@ -18,7 +18,7 @@ metadata:
"archive": "tar.bz2",
"extract": true,
"stripComponents": 1,
"targetDir": "~/.openclaw/tools/sherpa-onnx-tts/runtime",
"targetDir": "runtime",
"label": "Download sherpa-onnx runtime (macOS)",
},
{
@@ -29,7 +29,7 @@ metadata:
"archive": "tar.bz2",
"extract": true,
"stripComponents": 1,
"targetDir": "~/.openclaw/tools/sherpa-onnx-tts/runtime",
"targetDir": "runtime",
"label": "Download sherpa-onnx runtime (Linux x64)",
},
{
@@ -40,7 +40,7 @@ metadata:
"archive": "tar.bz2",
"extract": true,
"stripComponents": 1,
"targetDir": "~/.openclaw/tools/sherpa-onnx-tts/runtime",
"targetDir": "runtime",
"label": "Download sherpa-onnx runtime (Windows x64)",
},
{
@@ -49,7 +49,7 @@ metadata:
"url": "https://github.com/k2-fsa/sherpa-onnx/releases/download/tts-models/vits-piper-en_US-lessac-high.tar.bz2",
"archive": "tar.bz2",
"extract": true,
"targetDir": "~/.openclaw/tools/sherpa-onnx-tts/models",
"targetDir": "models",
"label": "Download Piper en_US lessac (high)",
},
],