Repository navigation
[aw-daily] GAP-004: Document cache-memory working-tree sanitization in tools-reference.md #28
Description
Gap Details
Type: missing
File: skills/aw-author/references/tools-reference.md
Section: Built-in MCP Tools — Cache Memory (cache-memory:) section
Current Content
The cache-memory: section documents configuration options but does not mention the pre-agent working-tree sanitization behavior.
Expected Content
Add a behavior note after the configuration table:
**Pre-agent working-tree sanitization:** Before the agent job starts, `cache-memory` automatically scans the restored cache for planted executables and disallowed file types. Any neutralized files are reported in the workflow logs. This protects against cache-poisoning attacks where a malicious actor could insert executable files into the cache between runs.
Source
PR #26587 in github/gh-aw: cache-memory: add pre-agent working-tree sanitization to neutralize planted executables and disallowed files
Intelligence Report
Automated by /aw-daily on 2026-04-16
Activity
docs(references): daily intelligence update 2026-04-16
docs(references): daily intelligence update 2026-04-16 (#30)
zircote commentedon Apr 16, 2026
Fixed in #30 (merged to
developon 2026-04-16). The cache-memory working-tree sanitization behavior is now documented inskills/aw-author/references/tools-reference.md.Closing manually because GitHub's auto-close keywords only fire on merges to the default branch (
main). The change will reachmainon the next/aw-merge(develop → main).