SkillSpector 2.11.2 can report incomplete static analysis for ordinary documentation and then emit AE1 High findings for every reference to the affected file.
Two independent examples reproduce this:
- Markdown containing
Use `$(hostname).example` for the host name. is marked static_parse_limit. The nested runtime value is treated as a possible printf reconstruction merely because the outer Markdown backticks are parsed as shell substitution.
- A JSON example with a value such as
"batch": "<omit on first request; reuse the returned identifier later>" followed by a long string value can be marked obfuscated_instruction_text. The fallback removal-directive parser uses the JSON value's closing quote as a marker opener, then exhausts lookahead while scanning unrelated fields.
Expected: these examples complete static analysis without derivative AE1 findings. Actual supported command reconstruction, runtime-selected helper paths, and ambiguous removal instructions must continue to retain findings or incomplete coverage.
Reported by Codex on behalf of Mohit Gupta.
SkillSpector 2.11.2 can report incomplete static analysis for ordinary documentation and then emit AE1 High findings for every reference to the affected file.
Two independent examples reproduce this:
Use `$(hostname).example` for the host name.is markedstatic_parse_limit. The nested runtime value is treated as a possibleprintfreconstruction merely because the outer Markdown backticks are parsed as shell substitution."batch": "<omit on first request; reuse the returned identifier later>"followed by a long string value can be markedobfuscated_instruction_text. The fallback removal-directive parser uses the JSON value's closing quote as a marker opener, then exhausts lookahead while scanning unrelated fields.Expected: these examples complete static analysis without derivative AE1 findings. Actual supported command reconstruction, runtime-selected helper paths, and ambiguous removal instructions must continue to retain findings or incomplete coverage.
Reported by Codex on behalf of Mohit Gupta.