-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Pull requests: NVIDIA/SkillSpector
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(analyzer): detect full environment reads via AST
#332
opened Aug 2, 2026 by
mohgupta-ship-it
Member
•
Draft
fix(analyzer): make E2 whitespace-tolerant and detect all os.environ read forms
#331
opened Aug 2, 2026 by
weed33834
Loading…
fix: parse space-separated allowed-tools strings (fixes #327)
#330
opened Aug 1, 2026 by
Bimpebabs
Loading…
fix(analyzer): filter license boilerplate from EA3 static findings (#312)
#328
opened Jul 31, 2026 by
rodboev
Contributor
Loading…
4 tasks done
fix(provider): align OpenAI fallback model configuration
#325
opened Jul 31, 2026 by
jstar0
Loading…
fix(cli,supply-chain): parse package.json as JSON, and send fatal errors to stderr
#323
opened Jul 31, 2026 by
Mark2Mac
Contributor
Loading…
fix(mp2): aligned tables and ASCII boxes are layout, not context stuffing
#322
opened Jul 31, 2026 by
Mark2Mac
Contributor
Loading…
fix(static): markdown table and quote syntax is not an execution signal
#321
opened Jul 31, 2026 by
Mark2Mac
Contributor
Loading…
fix(supply-chain): SC4 must not claim a vulnerability it did not verify (#318)
#319
opened Jul 30, 2026 by
Mark2Mac
Contributor
Loading…
fix(agent-cli): Windows temp-cwd cleanup must not fail a successful batch
#317
opened Jul 30, 2026 by
ppcvote
Loading…
fix(lp3): remediation and docs name allowed-tools for SKILL.md
#316
opened Jul 30, 2026 by
ppcvote
Loading…
fix: pin jsonschema-rs>=0.40.4 for Python 3.14 compatibility
#309
opened Jul 27, 2026 by
ly6751
Loading…
fix: exclude binary and large files from LLM analysis
#307
opened Jul 24, 2026 by
Makia9879
Loading…
fix(supply-chain): treat only == / <= as version pins in requirements.txt (#294)
#302
opened Jul 23, 2026 by
Mark2Mac
Contributor
Loading…
feat(cli): opt-in discovery of an author-shipped baseline (#278)
#286
opened Jul 18, 2026 by
rodboev
Contributor
Loading…
3 tasks done
fix(analyzer): retain fenced SKILL.md findings
#276
opened Jul 15, 2026 by
rodboev
Contributor
Loading…
6 tasks done
Isolate malformed LLM batch responses
#265
opened Jul 10, 2026 by
koriyoshi2041
Contributor
Loading…
fix: exclude valid OMS signatures from content analysis
#261
opened Jul 9, 2026 by
major-security
Loading…
feat(analyzer): reduce false positive for emoji-zwj-sequence
#260
opened Jul 8, 2026 by
badnoodle
Loading…
Fix uncaught pydantic ValidationError crash on malformed LLM response
#255
opened Jul 6, 2026 by
Ruanyuxi1337
Loading…
fix(analyzers): reduce false positives for negated safety constraints
#254
opened Jul 6, 2026 by
koriyoshi2041
Contributor
Loading…
feat(analyzer): detect insecure deserialization (AST10, TT6, DS1–DS4)
#246
opened Jul 3, 2026 by
AbhiramDwivedi
Contributor
Loading…
Previous Next
ProTip!
Follow long discussions with comments:>50.