All issues

E2 shell arm matches one `env | grep` spelling: a second grep flag, quotes, or egrep all evade "Env Variable Harvesting"

#482

· MandoCodes1 opened

on Sep 5, 2026

Windows: every scan fails with missing_file_cache / execution_successful: false when the skill path resolves to an 8.3 short DOS name

#481

· hoangthienpham opened

on Sep 2, 2026

Dynamic builtin resolution bypasses detection(malicious skill example that bypasses this static detection model)

#479

· 2002lcy0401 opened

on Sep 2, 2026

Runtime-decoded command bypasses (malicious skill example that bypasses this static detection model)

#478

· 2002lcy0401 opened

on Sep 2, 2026

Sensitive credential path detection can be bypassed through path construction

#477

· 2002lcy0401 opened

on Sep 2, 2026

shell=True detection can be bypassed through variable assignment

#475

· 2002lcy0401 opened

on Sep 2, 2026

RP3 gates on a manifest `version` key that build_context never populates, so the rule never fires

#472

· MohammedAlkindi opened

on Sep 1, 2026

False positive error with backtick variables like `$ARGUMENTS`

#464

· iammilaad opened

on Aug 31, 2026

Allow the 60s aggregate workflow budget to be raised (env var or CLI flag)

#460

· Saif-03 opened

on Aug 30, 2026

CLI providers cannot use SKILLSPECTOR_MODEL_REGISTRY: an empty REGISTRY_PATH short-circuits the override, forcing the 128k default

#459

· dberzan opened

on Aug 29, 2026

Trigger Abuse (TR1–TR3) gates on a `triggers:` frontmatter key that no supported skill spec defines, so the category never fires on real skills

#458

· zernie opened

on Aug 28, 2026

Add opt-in compact prompts mode to reduce LLM token usage

#456

· leogasparini opened

on Aug 28, 2026