Fu-Jie/openwebui-extensions openwebui-skills-manager-v0.3.3

OpenWebUI Skills Manager v0.3.3

on GitHub

🛡️ OpenWebUI Skills Manager — v0.3.3

What's Changed

• feat(openwebui-skills-manager): add REQUIRE_CONFIRMATION valve and fix confirmation-bypass vulnerability by @lionelvoser in #75

New Contributors

• @lionelvoser made their first contribution in #75 🎉

Details

New Features:

• REQUIRE_CONFIRMATION Valve (default: True) — prompts the user via __event_call__ before executing any destructive operation: update_skill, delete_skill, overwrite paths in create_skill / install_skill
• Structured cancellation result — cancelled operations return {"cancelled": true, "id": "...", "name": "...", "message": "..."} so callers can detect and handle gracefully

Bug Fix:

• Confirmation bypass prevention — replaced bool(result) with a strict isinstance(result, bool) check in _request_confirmation. Previously an error object returned on channel disconnect would coerce to True, silently proceeding with the destructive action

Internationalization:

• All 12 locales updated: en-US, zh-CN, zh-TW, zh-HK, ja-JP, ko-KR, fr-FR, de-DE, es-ES, it-IT, vi-VN, id-ID

📚 Documentation Portal
🐛 Report Issues

Full Changelog: openwebui-skills-manager-v0.3.2...openwebui-skills-manager-v0.3.3