Search results

SC4 (OSV known vulnerable dependency) reports all historical CVEs when requirements.txt uses >= operator #42

Status: Open.

#43 In NVIDIA/SkillSpector;

· woxinsj opened on Jun 13, 2026

SC4 (OSV known vulnerable dependency) reports all historical CVEs when requirements.txt uses >= operator

Status: Open.

#42 In NVIDIA/SkillSpector;

· woxinsj opened on Jun 13, 2026

Bidirectional control characters (Trojan Source, CVE-2021-42574) not detected in file contents

Status: Open.

#39 In NVIDIA/SkillSpector;

· asadbekXodjayev opened on Jun 13, 2026

OpenAI fallback uses active provider default model

Status: Open.

#38 In NVIDIA/SkillSpector;

· keshprad opened on Jun 13, 2026

Creates false positives on pure text-based content

Status: Open.

#37 In NVIDIA/SkillSpector;

· francoisdp opened on Jun 13, 2026

Expose SkillSpector as an MCP server so agents can scan skills as a tool

Status: Open.

#35 In NVIDIA/SkillSpector;

· CharmingGroot opened on Jun 13, 2026

Failing LLM Anthropic Calls

Status: Open.

#34 In NVIDIA/SkillSpector;

· builder-org443 opened on Jun 12, 2026

Calling the skill inspector from inside a skill

Status: Open.

#33 In NVIDIA/SkillSpector;

· franroa opened on Jun 12, 2026

Bound the input_handler ingest layer (URL download, zip extraction, git clone) before the per-file gate

Status: Open.

#21 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 10, 2026

Detect large whitespace padding used to hide prompt-injection instructions from review

Status: Open.

#20 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 10, 2026

LP3 fires when capabilities are declared via the standard allowed-tools field instead of permissions

Status: Open.

#15 In NVIDIA/SkillSpector;

· ahmadabdalla opened on Jun 4, 2026

False Report

Status: Open.

#14 In NVIDIA/SkillSpector;

· xrow opened on Jun 4, 2026