Issues · NVIDIA/SkillSpector · GitHub

Labels Milestones

feat: expose LLM token usage in JSON report output

#242

· amber-beasley-liatrio opened

on Jul 2, 2026

pypi name attempted squatting

#240

· smoy opened

on Jul 1, 2026

Skillspector is flagged to contain malware

#236

· wzhjeki opened

on Jun 30, 2026

OSV analyzer reports historical CVEs even when fixed version installed

#233

· jagoff opened

on Jun 29, 2026

[BUG] --format sarif is a lossy subset of --format json (drops category, confidence, remediation, code_snippet, intent, tags, end_line)

#229

· ThePlenkov opened

on Jun 29, 2026

[BUG] --recursive --format json emits per-skill summary, drops the full per-issue schema (issues[], components[], analysis_completeness)

#228

· ThePlenkov opened

on Jun 29, 2026

Proposal: bidirectional SkillSpector ↔ ATR category crosswalk (SARIF interop)

#226

· eeee2345 opened

on Jun 29, 2026

[Security] SC7: Container image pulled with signature/registry verification disabled (--disable-content-trust, DOCKER_CONTENT_TRUST=0, --insecure-registry) not detected

#223

· CharmingGroot opened

on Jun 28, 2026

docs: add OWASP Agentic Skills Top 10 (AST10) coverage matrix and gap analysis

#221

· grootynix opened

on Jun 27, 2026

(feature) Hypothesis & Correctness: a neurosymbolic verification architecture

#212

· smoy opened

on Jun 25, 2026

[BUG] Recursive multi-skill scans silently ignore --baseline and --show-suppressed

#201

· wernerkasselman-au opened

on Jun 24, 2026

[BUG] MCP server reports llm_available=false and skips the LLM pass when only the OpenAI fallback credential is set

#200

· wernerkasselman-au opened

on Jun 24, 2026