All issues

Search results

Provider setup docs omit supported backends

Status: Open.

#433 In NVIDIA/SkillSpector;

· deepujain opened on Aug 25, 2026

CLI help omits supported LLM providers and credentials

Status: Open.

#431 In NVIDIA/SkillSpector;

· deepujain opened on Aug 25, 2026

TP4 (description-behavior mismatch) never sees code embedded in markdown reference docsAffected rule: TP4 "Description-Behavior Mismatch" (MCP Tool Poisoning)

Status: Open.

#419 In NVIDIA/SkillSpector;

· benedictkwok opened on Aug 22, 2026

AE3/AE4 analyze binary assets the ledger already marks opaque_content (85-byte PNG -> HIGH, DO_NOT_INSTALL)

Status: Open.

#413 In NVIDIA/SkillSpector;

· sdkkds opened on Aug 21, 2026

Bundled hooks and settings are scanned as files but never analyzed as an execution surface

Status: Open.

#399 In NVIDIA/SkillSpector;

· tarang-tj opened on Aug 19, 2026

PE3 fires HIGH on credential vocabulary in prose: a SKILL.md containing only the word keyring is Privilege Escalation

Status: Open.

#396 In NVIDIA/SkillSpector;

· Mark2Mac opened on Aug 18, 2026

Coverage is computed but never affects the exit code: a partially-blind scan is indistinguishable from a complete one in CI

Status: Open.

#389 In NVIDIA/SkillSpector;

· Mark2Mac opened on Aug 18, 2026

SKILLSPECTOR_MAX_LLM_CONCURRENCY does not bound total in-flight LLM requests

Status: Open.

#387 In NVIDIA/SkillSpector;

· Mark2Mac opened on Aug 17, 2026

Feature request: detect model/provider pins in skill frontmatter

Status: Open.

#370 In NVIDIA/SkillSpector;

· abek858 opened on Aug 13, 2026

[SECURITY] SC8 presence check does not fix incomplete skip denylist (CWE-184 / CWE-693) (same class as __pycache__ still applies elsewhere)

Status: Open.

#367 In NVIDIA/SkillSpector;

· nedlir opened on Aug 12, 2026

Oversized companion file causes SkillSpector to skip analysis of unrelated skill files (v2.8.2) (another malicious skill example that bypasses this scanner)

Status: Open.

#363 In NVIDIA/SkillSpector;

· nedlir opened on Aug 12, 2026

No way to scope a scan, so a skill that ships test fixtures cannot pass

Status: Open.

#335 In NVIDIA/SkillSpector;

· shi-eric opened on Aug 2, 2026