mcp-serverBLOCK

.env

const parsed = yaml.load(yamlContent, { schema: yaml.FAILSAFE_SCHEMA }) as Record<string, any> | null;

loadedData = yaml.load(content, {

enrichedMetadata = yaml.load(preservedYAML, { schema: yaml.CORE_SCHEMA }) as DollhouseMCPSkillMetadata;

const enrichedMetadata = yaml.load(preservedYAML, { schema: yaml.CORE_SCHEMA }) as DollhouseMCPSkillMetadata;

const metadata = yaml.load(yamlMatch[1], { schema: yaml.CORE_SCHEMA }) as AnthropicSkillMetadata;

'exec() call',

'eval() call',

'exec() call': /exec\s*\(/i,

'~/.ssh/', '~/.gnupg/', '~/.aws/', '~/.config/',

'~/.env', '~/.netrc', '~/.npmrc',

│ 10. Execute agent (bypass safety checks - already verified)│

- Jailbreak and guideline bypass patterns (`DAN mode`, `do anything now`, `pretend you have no guidelines` — #1782-4)

/ignore\s+(all\s+)?previous\s+instructions/gi

console.log(`  Token savings:            ${formatNumber(tokenSavings)} tokens`);

console.log(`   GitHub Token: ${process.env.TEST_GITHUB_TOKEN ? 'Available' : 'Not Available'}`);

console.log(result.token);

{ pattern: /export\s+all\s+(files|data|personas|tokens|credentials|api\s+keys)/gi, severity: 'critical', description: 'Data exfiltration' },

{ pattern: /send\s+all\s+(files|data|personas|tokens|credentials|api\s+keys)\s+to/gi, severity: 'critical', description: 'Data exfiltration' },

const secret = 'correct-secret-value';

secret: 'test-secret-key-for-unit-tests',

secret: 'test-secret-key-for-unit-tests',

const code = `const apiKey = "sk-1234567890abcdef1234567890abcdef";`;

secret: 'different-secret-for-testing',

MOCK_GITHUB_PAT: 'ghp_FAKE1234567890TESTTOKEN1234567890TEST', // NOSONAR - Fake test token