mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-28 20:21:50 +01:00
Every live skill and reference the agent reads at run time still taught curl with the run bearer as a command-line argument. Rewrite each teaching occurrence onto the paperclip-api helper, which reads the token from the environment and adds it itself. State the reason next to each rewrite: a command-line argument appears in a process listing and in a shell history file. Regenerate the skills-catalog manifest for the three bundled skill files that changed. Rewrite the artifact upload script onto the same helper. The helper rejects a carriage return, a line feed, a double quote, or a backslash in the uploaded file name instead of escaping it, so a path carrying one of those characters now fails with a clear message. The script fails with a clear message when the helper is not on PATH, and does not fall back to curl. Co-authored-by: Paperclip <noreply@paperclip.ing>