Issues

• static_parse_limit: a TypeScript template literal with a call in its interpolation marks the file partially inspected

  NVIDIA/SkillSpector#884 · Filter by author KazunoriNakajima opened on Oct 20, 2026

• AS2 misses the MCP configs of Claude Desktop, Claude Code, Cline and Roo Code

  NVIDIA/SkillSpector#880 · Filter by author SergeevDmitry opened on Oct 19, 2026

• Memory poisoning is scored on the injection text, not the write: a test file that appends to MEMORY.md scores 0/100 SAFE

  NVIDIA/SkillSpector#879 · Filter by author garymike opened on Oct 19, 2026
  3

• .ps1 scripts skip SC3 and P2 checks that untyped files get

  NVIDIA/SkillSpector#873 · Filter by author udsy19 opened on Oct 19, 2026

• MP2 still fires on aligned Markdown tables (same shape as the P9 fix in #681)

  NVIDIA/SkillSpector#870 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• Ordinary prose marks analyzers degraded (obfuscated_instruction_text, static_parse_limit)

  NVIDIA/SkillSpector#868 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026
  1

• perf: derived text views are rebuilt by every analyzer (no cross-analyzer cache)

  NVIDIA/SkillSpector#867 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: per-character Python loops in the Unicode security view dominate analysis (~20 KB/s)

  NVIDIA/SkillSpector#866 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: the whole LLM stack is imported eagerly (~2 CPU-seconds per process, even for --version and --no-llm)

  NVIDIA/SkillSpector#865 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026
  1

• Support Python 3.15

  NVIDIA/SkillSpector#863 · Filter by author daeho-ro opened on Oct 18, 2026

• test_real_binary_structure_is_not_instruction_noise wall-clock bound flakes on slow CI runners

  NVIDIA/SkillSpector#861 · Filter by author Yoseph-Zuskin opened on Oct 18, 2026

• ransomware_behavior misses multi-line encrypt-in-place scripts

  NVIDIA/SkillSpector#859 · Filter by author udsy19 opened on Oct 17, 2026

• TM1 misses shell=True when an earlier argument contains a call (e.g. ' '.join(sys.argv[1:]))

  NVIDIA/SkillSpector#857 · Filter by author udsy19 opened on Oct 17, 2026

• semantic_security_discovery runs its batches one at a time

  NVIDIA/SkillSpector#854 · Filter by author elliottwaves-20 opened on Oct 17, 2026

• LLM batches for large files exceed MAX_INPUT_BYTES on CLI providers, so the scan never reaches a verdict

  NVIDIA/SkillSpector#853 · Filter by author elliottwaves-20 opened on Oct 17, 2026

• bedrock: mcp_tool_poisoning (TP4) fails with NotImplementedError when structured output returns None; run ends execution_successful=false, exit 2

  NVIDIA/SkillSpector#843 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026

• --recursive stops after 32 skills (hardcoded _MULTI_SKILL_MAX_SKILLS); cap is undocumented and cannot be raised

  NVIDIA/SkillSpector#842 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026
  1

• Registry mode silently ignores shipped-baseline and transitive options

  NVIDIA/SkillSpector#839 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• E1 upload matcher borrows flags from independent commands

  NVIDIA/SkillSpector#838 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• fix: align recursive aggregate risk recommendations with child reports

  NVIDIA/SkillSpector#835 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• fix: MP3 flags descriptive hardware reset-state prose

  NVIDIA/SkillSpector#834 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• TM1 flags the HTTP verb DELETE in REST route tables despite the pattern comment saying it avoids them

  NVIDIA/SkillSpector#832 · Filter by author jwcastillo opened on Oct 14, 2026

• PE3 flags .env entries inside ```gitignore code fences in Markdown

  NVIDIA/SkillSpector#830 · Filter by author jwcastillo opened on Oct 14, 2026

• Reject ignored shipped-baseline opt-in in recursive multi-skill scans

  NVIDIA/SkillSpector#822 · Filter by author chrisknvidia opened on Oct 13, 2026
  

• Support custom HTTP headers for OpenAICompatibleProvider

  NVIDIA/SkillSpector#821 · Filter by author jh49choi opened on Oct 13, 2026
  1