js-yaml

Headlines · 1

1. Nov 2
   Handwritten SKILL.md parser misreads valid YAML

   A skill-pack developer found that a zero-dependency parser for SKILL.md frontmatter mishandled several valid YAML forms, including folded descriptions, single-quoted strings, trailing comments, and nested metadata keys. Compared with js-yaml 4.3.2 on Node 20.19.2, the parser could silently replace a skill’s trigger description with a nested value. Proposed changes explicitly reject multiline scalars, correctly handle quoted values and comments, ignore nested keys, and tighten metadata validation.

   掘金 · 人工智能 · 🔥 0

Experience and discussion from the community

Share my js-yaml experienceAsk about js-yaml