Junglewise Threat Intelligence

skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery

Severity: info · Published 2026-06-22

Vendors: crates.io.

Executive brief

skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery

Affected products

  • crates.io skillctl

Related threats