Fix #2203: skill-memory zip extractall is path-traversal (zip-slip); activation cache uses - #2204

Open

Memtensor-AI wants to merge 2 commits into

MemTensor:dev-v2.0.29from

Memtensor-AI:bugfix/autodev-2203-20260804015142516

Commits on Aug 4, 2026

fix(security): harden skill-zip extract and activation-cache unpickle (#2203)
MemOS AutoDev
committed
9592126
fix(security): address OCR findings on skill-zip + activation-cache hardening

MemOS AutoDev
and
claude
committed
0a83b16