ctx7@0.5.6

SagerNet/sing-boxctx7@0.5.6Jul 25, 2026by github-actions[bot]

AI Summary

This release improves the security and reliability of the `ctx7 setup` process by removing a shell wrapper that triggered endpoint protection alerts and adding a fallback mechanism for fetching skills.

Key Highlights

GitHub CLI auth token retrieval now avoids shell wrapper to prevent endpoint protection alerts
Added fallback to fetch `SKILL.md` from `raw.githubusercontent.com` when the GitHub API is blocked
Improved query prompts for agents

New Features

Improved query prompts for agents

Full Release Notes

### Patch Changes

- 23843e9: Read the GitHub CLI auth token by invoking `gh` directly instead of through a shell. The shell wrapper (`cmd.exe /d /s /c` on Windows) caused endpoint protection tools such as Microsoft Defender for Endpoint to raise a "Suspicious Node.js process behavior" alert during `ctx7 setup`.
- c82cc8a: Fix `ctx7 setup` skill install failing with "fetch failed" when the GitHub git tree API (`api.github.com`) is blocked or unreachable. Skill download now falls back to fetching the single `SKILL.md` directly from `raw.githubusercontent.com` — the URL the docs API already resolves — so setup succeeds in environments where only the docs/raw hosts are reachable.
- 1c081df: Improve query prompts so agents request relevant library documentation instead of passing the task to complete.