Executive brief
skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery
Affected products
- crates.io skillctl
Junglewise Threat Intelligence
Severity: info · Published 2026-06-22
Vendors: crates.io.
skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery