Issues

TP4 (description-behavior mismatch) never sees code embedded in markdown reference docsAffected rule: TP4 "Description-Behavior Mismatch" (MCP Tool Poisoning)

#419

· benedictkwok opened

on Aug 22, 2026

AE3/AE4 analyze binary assets the ledger already marks opaque_content (85-byte PNG -> HIGH, DO_NOT_INSTALL)

#413

· sdkkds opened

on Aug 21, 2026

Git sample hooks make safe skills fail SC9

#411

· kriptoburak opened

on Aug 21, 2026

PE3 .env pattern matches Python attribute access (self.env, args.env), not just credential files

#407

· benedictkwok opened

on Aug 21, 2026

PE3's OAuth "access token" documentation exemption doesn't recognize the singular reference/ directory

#406

· benedictkwok opened

on Aug 21, 2026

EA1 wildcard-tool-access pattern crosses blank lines and matches markdown bold syntax Affected rule: EA1 "Unrestricted Tool Access" Affected file: src/skillspector/nodes/analyzers/static_patterns_excessive_agency.py, line 45

#405

· benedictkwok opened

on Aug 21, 2026

Bundled hooks and settings are scanned as files but never analyzed as an execution surface

#399

· tarang-tj opened

on Aug 19, 2026

PE3 fires HIGH on credential vocabulary in prose: a SKILL.md containing only the word `keyring` is Privilege Escalation

#396

· Mark2Mac opened

on Aug 18, 2026

Coverage is computed but never affects the exit code: a partially-blind scan is indistinguishable from a complete one in CI

#389

· Mark2Mac opened

on Aug 18, 2026

SKILLSPECTOR_MAX_LLM_CONCURRENCY does not bound total in-flight LLM requests

#387

· Mark2Mac opened

on Aug 17, 2026

osv_client silently drops 90% of vulnerabilities on packages with many advisories

#386

· Mark2Mac opened

on Aug 17, 2026

Feature request: detect model/provider pins in skill frontmatter

#370

· abek858 opened

on Aug 13, 2026

Navigation Menu

Uh oh!

All issues

TP4 (description-behavior mismatch) never sees code embedded in markdown reference docsAffected rule: TP4 "Description-Behavior Mismatch" (MCP Tool Poisoning)

AE3/AE4 analyze binary assets the ledger already marks opaque_content (85-byte PNG -> HIGH, DO_NOT_INSTALL)

Git sample hooks make safe skills fail SC9

PE3 .env pattern matches Python attribute access (self.env, args.env), not just credential files

PE3's OAuth "access token" documentation exemption doesn't recognize the singular reference/ directory

EA1 wildcard-tool-access pattern crosses blank lines and matches markdown bold syntax Affected rule: EA1 "Unrestricted Tool Access" Affected file: src/skillspector/nodes/analyzers/static_patterns_excessive_agency.py, line 45

Bundled hooks and settings are scanned as files but never analyzed as an execution surface

PE3 fires HIGH on credential vocabulary in prose: a SKILL.md containing only the word `keyring` is Privilege Escalation

Coverage is computed but never affects the exit code: a partially-blind scan is indistinguishable from a complete one in CI

SKILLSPECTOR_MAX_LLM_CONCURRENCY does not bound total in-flight LLM requests

osv_client silently drops 90% of vulnerabilities on packages with many advisories

Feature request: detect model/provider pins in skill frontmatter

Uh oh!

Search results