Baseline · Permissions & isolation
D-04 Filesystem access is scoped
highmanual review
Why it matters
No full-disk read/write by default; limited to a working directory.
How to test
Have a skill try to read files outside the working directory.
How to fix
Scope file access to a root directory; reject out-of-scope paths.