Search results

[BUG] Unicode Tag-block "ASCII smuggling" hidden instructions (U+E0000–U+E007F) are not detected

Status: Open.

#169 In NVIDIA/SkillSpector;

· asadbekXodjayev opened on Jun 23, 2026

[BUG] Reflective exec via getattr(os,'system') / getattr(builtins,'exec') evades ALL AST rules and the taint tracker

Status: Open.

#168 In NVIDIA/SkillSpector;

· asadbekXodjayev opened on Jun 23, 2026

[Bug] YARA rule cache uses file size instead of content hash — stale rules served after edits

Status: Open.

#152 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Security] MP2 regex vulnerable to catastrophic backtracking (ReDoS)

Status: Open.

#151 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Bug] MCP rug-pull analyzer is a non-functional stub that creates false sense of security

Status: Open.

#150 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Bug] LLM API failures silently produce zero findings with no retry or user notification

Status: Open.

#149 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Bug] SARIF output non-compliant — missing required rules[] array in tool.driver

Status: Open.

#148 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Security] Zip Slip path traversal and SSRF via permissive Git URL validation in InputHandler

Status: Open.

#147 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Bug] LLM semantic analyzer returns empty findings objects that inflate issue count

Status: Open.

#146 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Bug] PE3 static pattern flags .env file references in documentation as privilege escalation

Status: Open.

#145 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Bug] Binary/PDF files trigger mass false positives in static pattern analysis

Status: Open.

#144 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026

[Feature] --no-llm mode bypasses meta-analyzer entirely, presenting unfiltered raw findings as final results

Status: Open.

#138 In NVIDIA/SkillSpector;

· mimran-khan opened on Jun 22, 2026