file-reference-skill

Path traversal protection validates that file references stay within your skill's base directory, blocking attempts to access parent directories or absolute paths. This Skill implements symlink validation, relative path enforcement, and detailed security logging to reject unauthorized access attempts with PathSecurityError.

Secure path resolution converts relative file paths to validated absolute paths within your skill directory while blocking external traversal. The resolver checks symlinks, rejects absolute paths, enforces relative paths, and logs all access attempts for audit trails.

Use relative path resolution with built-in validation to safely access scripts, templates, and documentation files. The approach prevents traversal outside the skill directory through symlink checks, absolute path rejection, and enforced relative path usage.

Yes, this Skill handles secure file access in data processing workflows by resolving and validating relative paths to any supporting file type. It works across skill invocations that need templates, scripts, or documentation while maintaining security boundaries.

Security violations—such as traversal attempts, symlink attacks, or absolute path usage—raise PathSecurityError exceptions. Detailed logging captures all violations for monitoring and debugging security issues.

Only relative paths are supported and enforced. Absolute paths are rejected at validation time to prevent access outside the skill directory. Relative path enforcement is a core security control.