From afc2b34531d555949dcefcb43b26954516bccb45 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Tue, 15 Sep 2026 08:22:39 +0000
Subject: [PATCH] fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security
---
 scripts/scaffold-codemod.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/scaffold-codemod.js b/scripts/scaffold-codemod.js
index 80205fb4..904e9c20 100644
--- a/scripts/scaffold-codemod.js
+++ b/scripts/scaffold-codemod.js
@@ -10,6 +10,10 @@ import fs from 'node:fs';
 
 const name = process.argv[2];
 
+if (!name || !/^[a-zA-Z0-9-]+$/.test(name)) {
+	throw new Error('Invalid name: only alphanumeric characters and hyphens are allowed');
+}
+
 fs.mkdirSync(`./test/fixtures/${name}/case-1`, { recursive: true });
 fs.writeFileSync(
 	`./test/fixtures/${name}/case-1/before.js`,