All issues

Search results

AE1 classifies opaque-by-type assets as analysis-evasion HIGH, discarding the ledger reason_code that distinguishes them from real coverage failures

Status: Open.

#596 In NVIDIA/SkillSpector;

· sdkkds opened on Sep 20, 2026

Built-in reverse_shell YARA rule misses multi-line Python/Perl socket reverse shells

Status: Open.

#592 In NVIDIA/SkillSpector;

· udsy19 opened on Sep 20, 2026

Analyzer modules dropped at import time are invisible to analysis_completeness

Status: Open.

#590 In NVIDIA/SkillSpector;

· udsy19 opened on Sep 19, 2026

OSV.dev "MODERATE" severity (GHSA scale) silently downgraded to LOW in SC4 findings

Status: Open.

#587 In NVIDIA/SkillSpector;

· udsy19 opened on Sep 19, 2026

Dynamic URL / socket stream exfiltration bypasses static egress detection rules

Status: Open.

#586 In NVIDIA/SkillSpector;

· nguyenhungtran18 opened on Sep 18, 2026

Declaration files classify as executable, but excluding .d.cts/.d.mts by name is unsafe

Status: Open.

#585 In NVIDIA/SkillSpector;

· MohammedAlkindi opened on Sep 18, 2026

Custom YARA rules that fail to compile are dropped silently: static_yara still reports completed and SAFE

Status: Open.

#554 In NVIDIA/SkillSpector;

· ppcvote opened on Sep 16, 2026

support subdir within git url

Status: Open.

#552 In NVIDIA/SkillSpector;

· joshuaferguson-swish opened on Sep 15, 2026

Current GPT Model Budgets (openai + azure_openai)

Status: Open.

#538 In NVIDIA/SkillSpector;

· Yoseph-Zuskin opened on Sep 14, 2026

SC6: track release of the uvicorn/gunicorn exact-name correction

Status: Open.

#531 In NVIDIA/SkillSpector;

· mohgupta-ship-it opened on Sep 13, 2026

Scoped npm package specs are misclassified as unresolved local references

Status: Open.

#528 In NVIDIA/SkillSpector;

· jasonacurry opened on Sep 12, 2026

Quoted version metadata creates a false missing-file reference and changes score 0 from SAFE to CAUTION

Status: Open.

#524 In NVIDIA/SkillSpector;

· Patrick-Erichsen opened on Sep 11, 2026