Function validateLocalSkillPackagePath

agent/app/service/agents_skills.go:325–352

(packagePath string)

}

func validateLocalSkillPackagePath(packagePath string) (string, error) {
	packagePath = strings.TrimSpace(packagePath)
	if packagePath == "" {
		return "", fmt.Errorf("skill package path is required")
	}
	if _, err := localSkillPackageFormat(packagePath); err != nil {
		return "", err
	}
	absPath, err := filepath.Abs(packagePath)
	if err != nil {
		return "", err
	}
	resolvedPath, err := filepath.EvalSymlinks(absPath)
	if err != nil {
		return "", err
	}
	if !isLocalSkillPackageAllowedPath(resolvedPath) {
		return "", fmt.Errorf("invalid local skill package path")
	}
	info, err := os.Stat(resolvedPath)
	if err != nil {
		return "", err
	}
	if info.IsDir() {
		return "", fmt.Errorf("skill package must be a file")
	}
	return resolvedPath, nil
}

func isLocalSkillPackageAllowedPath(resolvedPath string) bool {
	roots := []string{