Issues

• MP2 still fires on aligned Markdown tables (same shape as the P9 fix in #681)

  NVIDIA/SkillSpector#870 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• Release hygiene: no tags, version string unchanged across 937 commits

  NVIDIA/SkillSpector#869 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• Ordinary prose marks analyzers degraded (obfuscated_instruction_text, static_parse_limit)

  NVIDIA/SkillSpector#868 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: derived text views are rebuilt by every analyzer (no cross-analyzer cache)

  NVIDIA/SkillSpector#867 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: per-character Python loops in the Unicode security view dominate analysis (~20 KB/s)

  NVIDIA/SkillSpector#866 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• perf: the whole LLM stack is imported eagerly (~2 CPU-seconds per process, even for --version and --no-llm)

  NVIDIA/SkillSpector#865 · Filter by author naamanhirschfeld-armis opened on Oct 18, 2026

• Support Python 3.15

  NVIDIA/SkillSpector#863 · Filter by author daeho-ro opened on Oct 18, 2026

• test_real_binary_structure_is_not_instruction_noise wall-clock bound flakes on slow CI runners

  NVIDIA/SkillSpector#861 · Filter by author Yoseph-Zuskin opened on Oct 18, 2026

• ransomware_behavior misses multi-line encrypt-in-place scripts

  NVIDIA/SkillSpector#859 · Filter by author udsy19 opened on Oct 17, 2026

• TM1 misses shell=True when an earlier argument contains a call (e.g. ' '.join(sys.argv[1:]))

  NVIDIA/SkillSpector#857 · Filter by author udsy19 opened on Oct 17, 2026

• semantic_security_discovery runs its batches one at a time

  NVIDIA/SkillSpector#854 · Filter by author elliottwaves-20 opened on Oct 17, 2026

• LLM batches for large files exceed MAX_INPUT_BYTES on CLI providers, so the scan never reaches a verdict

  NVIDIA/SkillSpector#853 · Filter by author elliottwaves-20 opened on Oct 17, 2026

• bedrock: mcp_tool_poisoning (TP4) fails with NotImplementedError when structured output returns None; run ends execution_successful=false, exit 2

  NVIDIA/SkillSpector#843 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026

• --recursive stops after 32 skills (hardcoded _MULTI_SKILL_MAX_SKILLS); cap is undocumented and cannot be raised

  NVIDIA/SkillSpector#842 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026
  1

• Registry mode silently ignores shipped-baseline and transitive options

  NVIDIA/SkillSpector#839 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• E1 upload matcher borrows flags from independent commands

  NVIDIA/SkillSpector#838 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• fix: align recursive aggregate risk recommendations with child reports

  NVIDIA/SkillSpector#835 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• fix: MP3 flags descriptive hardware reset-state prose

  NVIDIA/SkillSpector#834 · Filter by author chrisknvidia opened on Oct 14, 2026
  

• TM1 flags the HTTP verb DELETE in REST route tables despite the pattern comment saying it avoids them

  NVIDIA/SkillSpector#832 · Filter by author jwcastillo opened on Oct 14, 2026

• PE3 flags .env entries inside ```gitignore code fences in Markdown

  NVIDIA/SkillSpector#830 · Filter by author jwcastillo opened on Oct 14, 2026

• Reject ignored shipped-baseline opt-in in recursive multi-skill scans

  NVIDIA/SkillSpector#822 · Filter by author chrisknvidia opened on Oct 13, 2026
  

• Support custom HTTP headers for OpenAICompatibleProvider

  NVIDIA/SkillSpector#821 · Filter by author jh49choi opened on Oct 13, 2026
  1

• E2 shell arm: known limits of the grep -v exemption after #483

  NVIDIA/SkillSpector#818 · Filter by author MandoCodes1 opened on Oct 12, 2026

• Quote in a heredoc body, comment or prose hides a later command line from the command-word scan

  NVIDIA/SkillSpector#813 · Filter by author elliottwaves-20 opened on Oct 9, 2026
  1

• CLI still reports zero-finding scans as partial/CAUTION when the only exceptions are reference_missing (#510 fixed MCP only)

  NVIDIA/SkillSpector#804 · Filter by author nigel-upstart opened on Oct 8, 2026
  1