You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
ZIP inputs with uppercase extensions are not extracted #726
A valid skill archive named skill.zip is unpacked, but renaming that same archive to skill.ZIP or skill.ZiP makes SkillSpector treat it as an ordinary file. The contained SKILL.md is therefore not exposed for scanning.
This occurs for local inputs and for supported file URLs when the server supplies a generic content type, such as application/octet-stream.
Reproduction
On main at 4a5506276795397c62ed4f0111c08f41c2b9f1b1, run this from an environment with SkillSpector installed:
Expected: all three inputs resolve as zip and contain an extracted SKILL.md.
Actual:
.zip zip True
.ZIP file False
.ZiP file False
InputHandler.resolve, _download_file, and _download_transitive_file each use a case-sensitive .endswith(".zip") check. Making those extension checks case-insensitive would allow the same archive to be processed consistently regardless of extension capitalization.
Activity
rng1995 commentedon Oct 6, 2026
Merge-state update checked on 2026-10-06: PR #727 has merged, and GitHub automatically closed this issue as completed.
ZIP input handling now recognizes supported archive extensions case-insensitively.