Search results

[phantomstars] Fake engagement detected on this repository

Status: Open.

#31 In NVIDIA/SkillSpector;

· tg12 opened on Jun 12, 2026

Bound the input_handler ingest layer (URL download, zip extraction, git clone) before the per-file gate

Status: Open.

#21 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 10, 2026

Detect large whitespace padding used to hide prompt-injection instructions from review

Status: Open.

#20 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 10, 2026

LP3 fires when capabilities are declared via the standard allowed-tools field instead of permissions

Status: Open.

#15 In NVIDIA/SkillSpector;

· ahmadabdalla opened on Jun 4, 2026

False Report

Status: Open.

#14 In NVIDIA/SkillSpector;

· xrow opened on Jun 4, 2026

Stage 2: apply_filter silently drops findings for files the LLM never analyzed (false negatives)

Status: Open.

#11 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 1, 2026

Stage 2: LLM calls have no retry/backoff on 429 or timeout; default concurrency 10 is unconfigurable

Status: Open.

#10 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 1, 2026

Stage 2: one failed batch aborts the entire meta-analyzer pass and silently falls back to static

Status: Open.

#9 In NVIDIA/SkillSpector;

· wernerkasselman-au opened on Jun 1, 2026

Support Github Copilot LLM as a provider

Status: Open.

#8 In NVIDIA/SkillSpector;

· sandymanintel opened on Jun 1, 2026

Anthropic provider silently falls back to static — LLM analyzers 400 on minimum/maximum in tool schema

Status: Open.

#4 In NVIDIA/SkillSpector;

· jeremy153 opened on May 31, 2026

False positive: 'requires-python' pyproject field flagged as malicious PyPI package (MAL-2025-41747)

Status: Open.

#2 In NVIDIA/SkillSpector;

· BreBryBro opened on May 31, 2026