From c8bdefd8b40ac9427e31b4cebd3d0422b2ebac60 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Thu, 19 Feb 2026 00:20:15 +0000
Subject: [PATCH] refactor(security): reuse shared scan path containment helper

---
 src/security/skill-scanner.ts | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/src/security/skill-scanner.ts b/src/security/skill-scanner.ts
index de14f7e57b..dd58e61bae 100644
--- a/src/security/skill-scanner.ts
+++ b/src/security/skill-scanner.ts
@@ -1,6 +1,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { hasErrnoCode } from "../infra/errors.js";
+import { isPathInside } from "./scan-paths.js";
 
 // ---------------------------------------------------------------------------
 // Types
@@ -252,13 +253,6 @@ function normalizeScanOptions(opts?: SkillScanOptions): Required<SkillScanOption
   };
 }
 
-function isPathInside(basePath: string, candidatePath: string): boolean {
-  const base = path.resolve(basePath);
-  const candidate = path.resolve(candidatePath);
-  const rel = path.relative(base, candidate);
-  return rel === "" || (!rel.startsWith(`..${path.sep}`) && rel !== ".." && !path.isAbsolute(rel));
-}
-
 async function walkDirWithLimit(dirPath: string, maxFiles: number): Promise<string[]> {
   const files: string[] = [];
   const stack: string[] = [dirPath];