Executive brief
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
Affected products
- crates.io skilo
Junglewise Threat Intelligence
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
Severity: low · CVSS 3.1 · Published 2026-07-28
Vendors: crates.io.