fix(security): block untrusted workspace providers in startup discovery

vincentkoc · vincentkoc · commit 7c07ee5d68ff · 2026-04-29T04:20:48.000-07:00
diff --git a/src/agents/models-config.providers.implicit.discovery-scope.test.ts b/src/agents/models-config.providers.implicit.discovery-scope.test.ts
@@ -111,6 +111,7 @@ describe("resolveImplicitProviders startup discovery scope", () => {
     expect(mocks.resolveRuntimePluginDiscoveryProviders).toHaveBeenCalledWith(
       expect.objectContaining({
         discoveryEntriesOnly: true,
+        includeUntrustedWorkspacePlugins: false,
       }),
     );
   });
diff --git a/src/agents/models-config.providers.implicit.ts b/src/agents/models-config.providers.implicit.ts
@@ -484,7 +484,9 @@ export async function resolveImplicitProviders(
     ...(params.pluginMetadataSnapshot
       ? { pluginMetadataSnapshot: params.pluginMetadataSnapshot }
       : {}),
-    ...(params.providerDiscoveryEntriesOnly === true ? { discoveryEntriesOnly: true } : {}),
+    ...(params.providerDiscoveryEntriesOnly === true
+      ? { discoveryEntriesOnly: true, includeUntrustedWorkspacePlugins: false }
+      : {}),
   });
 
   for (const order of PLUGIN_DISCOVERY_ORDERS) {
