All issues

SC6: track release of the uvicorn/gunicorn exact-name correction

#531

· mohgupta-ship-it opened

on Sep 13, 2026

Scoped npm package specs are misclassified as unresolved local references

#528

· jasonacurry opened

on Sep 12, 2026

Quoted version metadata creates a false missing-file reference and changes score 0 from SAFE to CAUTION

#524

· Patrick-Erichsen opened

on Sep 11, 2026

Static v2.11.1: distinguish inert security-test strings and taxonomy labels from executable behavior in findings

#523

· CyberStrategy1 opened

on Sep 10, 2026

Dynamic workflow deadline leaks an httpx pool per LLM call and raises "Event loop is closed"

#519

· FacaHD opened

on Sep 10, 2026

P6 false positive on HTML Output Rules documentation heading

#512

· chrisknvidia opened

on Sep 10, 2026

[False positive] Output references like "save to `save.md`" make a clean skill partial: `is_complete=false` / `safe_to_install=false`

#510

· ikaros-0117 opened

on Sep 9, 2026

AS3 flags current-skill SKILL.md self-references as Agent Snooping

#500

· chrisknvidia opened

on Sep 9, 2026

Recursive scan silently skips symlinked skill directories while reporting `skills_omitted: 0` and `analysis_completeness: complete` (100%)

#495

· shadowlestat666-a11y opened

on Sep 8, 2026

feat(providers): Support Google Gemini via Application Default Credentials (ADC) and Workload Identity

#494

· bytemare opened

on Sep 7, 2026

False positive: php_webshell_known fires on the German word "behindert" and on "WSO " in prose

#487

· kleinwerkstatt opened

on Sep 6, 2026

compare_scan_accuracy: editable-dependency file:// URL resolves to "C:\C:\..." on Windows

#485

· SanHsien opened

on Sep 6, 2026