- Add URL validation to download-attachment (only allow http/https)
- Add filename sanitization to prevent path traversal attacks
- Add timeouts to download commands (30 seconds)
- Add branch name sanitization in pull-request command
- Check for existing branches to avoid conflicts
- Add check for current feature branch
Addresses security concerns raised by Claude in PR #1 review
- Add /download-attachment command for downloading files from URLs
- Add /pull-request command for creating PRs in one step
- Expose transcript:extract script in package.json
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>