mirror of
https://github.com/MervinPraison/PraisonAI-Tools.git
synced 2026-11-07 05:56:17 -10:00
Address reviewer findings on PR #84: - describe_path template validated (must contain {tool_id}; malformed templates return a tool-result error instead of raising, honoring the error contract) - tool_id URL-encoded on both describe and /call routes (prevents path escape) - explicit method stripped/upper-cased and validated against an allowed set - deny-path spend-guard tests assert client.request (not client.post) not called Co-authored-by: Mervin Praison <[email protected]>