All issues

Dynamic workflow deadline leaks an httpx pool per LLM call and raises "Event loop is closed"

#519

· FacaHD opened

on Sep 10, 2026

Documentation code spans and JSON placeholders trigger false incomplete-analysis findings

#515

· mohgupta-ship-it opened

on Sep 10, 2026

P6 false positive on HTML Output Rules documentation heading

#512

· chrisknvidia opened

on Sep 10, 2026

[False positive] Output references like "save to `save.md`" make a clean skill partial: `is_complete=false` / `safe_to_install=false`

#510

· ikaros-0117 opened

on Sep 9, 2026

AS3 flags current-skill SKILL.md self-references as Agent Snooping

#500

· chrisknvidia opened

on Sep 9, 2026

Recursive scan silently skips symlinked skill directories while reporting `skills_omitted: 0` and `analysis_completeness: complete` (100%)

#495

· shadowlestat666-a11y opened

on Sep 8, 2026

feat(providers): Support Google Gemini via Application Default Credentials (ADC) and Workload Identity

#494

· bytemare opened

on Sep 7, 2026

False positive: php_webshell_known fires on the German word "behindert" and on "WSO " in prose

#487

· kleinwerkstatt opened

on Sep 6, 2026

compare_scan_accuracy: editable-dependency file:// URL resolves to "C:\C:\..." on Windows

#485

· SanHsien opened

on Sep 6, 2026

E2 shell arm matches one `env | grep` spelling: a second grep flag, quotes, or egrep all evade "Env Variable Harvesting"

#482

· MandoCodes1 opened

on Sep 5, 2026

Windows: every scan fails with missing_file_cache / execution_successful: false when the skill path resolves to an 8.3 short DOS name

#481

· hoangthienpham opened

on Sep 2, 2026

Dynamic builtin resolution bypasses detection(malicious skill example that bypasses this static detection model)

#479

· 2002lcy0401 opened

on Sep 2, 2026