Issues

• Deterministic layer fails closed on an ordinary list of verb names (['delete', 'run', 'list'])

  NVIDIA/SkillSpector#892 · Filter by author KazunoriNakajima opened on Oct 21, 2026

• E5 labels cloud-to-local downloads as cloud exfiltration

  NVIDIA/SkillSpector#889 · Filter by author chrisknvidia opened on Oct 20, 2026
  

• OH1 flags proven DB-API parameter binding as output injection

  NVIDIA/SkillSpector#888 · Filter by author chrisknvidia opened on Oct 20, 2026
  

• P5 false positive: aircraft-safety explanation is classified as harmful instructions

  NVIDIA/SkillSpector#887 · Filter by author Ara-Yeroyan opened on Oct 20, 2026

• À

  NVIDIA/SkillSpector#886 · Filter by author Adelo31 opened on Oct 20, 2026

• CLI error messages are parsed as Rich markup, so skillspector mcp drops [mcp] from its install hint

  NVIDIA/SkillSpector#885 · Filter by author WeAreResilience opened on Oct 20, 2026

• static_parse_limit: a backtick template literal whose first word holds a non-trivial ${...} is read as a possible printf substitution

  NVIDIA/SkillSpector#884 · Filter by author KazunoriNakajima opened on Oct 20, 2026
  2

• AS2 misses the MCP configs of Claude Desktop, Claude Code, Cline and Roo Code

  NVIDIA/SkillSpector#880 · Filter by author SergeevDmitry opened on Oct 19, 2026

• Memory poisoning is scored on the injection text, not the write: a test file that appends to MEMORY.md scores 0/100 SAFE

  NVIDIA/SkillSpector#879 · Filter by author garymike opened on Oct 19, 2026
  3

• .ps1 scripts skip SC3 and P2 checks that untyped files get

  NVIDIA/SkillSpector#873 · Filter by author udsy19 opened on Oct 19, 2026

• MP2 still fires on aligned Markdown tables (same shape as the P9 fix in #681)

  NVIDIA/SkillSpector#870 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• Ordinary prose marks analyzers degraded (obfuscated_instruction_text, static_parse_limit)

  NVIDIA/SkillSpector#868 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026
  1

• perf: derived text views are rebuilt by every analyzer (no cross-analyzer cache)

  NVIDIA/SkillSpector#867 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: per-character Python loops in the Unicode security view dominate analysis (~20 KB/s)

  NVIDIA/SkillSpector#866 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: the whole LLM stack is imported eagerly (~2 CPU-seconds per process, even for --version and --no-llm)

  NVIDIA/SkillSpector#865 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026
  1

• Support Python 3.15

  NVIDIA/SkillSpector#863 · Filter by author daeho-ro opened on Oct 18, 2026

• test_real_binary_structure_is_not_instruction_noise wall-clock bound flakes on slow CI runners

  NVIDIA/SkillSpector#861 · Filter by author Yoseph-Zuskin opened on Oct 18, 2026

• ransomware_behavior misses multi-line encrypt-in-place scripts

  NVIDIA/SkillSpector#859 · Filter by author udsy19 opened on Oct 17, 2026

• TM1 misses shell=True when an earlier argument contains a call (e.g. ' '.join(sys.argv[1:]))

  NVIDIA/SkillSpector#857 · Filter by author udsy19 opened on Oct 17, 2026

• semantic_security_discovery runs its batches one at a time

  NVIDIA/SkillSpector#854 · Filter by author elliottwaves-20 opened on Oct 17, 2026

• LLM batches for large files exceed MAX_INPUT_BYTES on CLI providers, so the scan never reaches a verdict

  NVIDIA/SkillSpector#853 · Filter by author elliottwaves-20 opened on Oct 17, 2026

• bedrock: mcp_tool_poisoning (TP4) fails with NotImplementedError when structured output returns None; run ends execution_successful=false, exit 2

  NVIDIA/SkillSpector#843 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026

• --recursive stops after 32 skills (hardcoded _MULTI_SKILL_MAX_SKILLS); cap is undocumented and cannot be raised

  NVIDIA/SkillSpector#842 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026
  1

• E1 upload matcher borrows flags from independent commands

  NVIDIA/SkillSpector#838 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• TM1 flags the HTTP verb DELETE in REST route tables despite the pattern comment saying it avoids them

  NVIDIA/SkillSpector#832 · Filter by author jwcastillo opened on Oct 14, 2026