domehahn/skil

analyzer: credential-then-network-call heuristic false-positives on a single documented API destination about 2 hours ago

bug good first issue analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

analyzer: SKIL-PI-001 false-positives on defensive anti-injection policy text about 2 hours ago

bug good first issue analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

benchmark: expand the mutation-robustness sample beyond 6 rules about 2 hours ago

enhancement help wanted benchmark

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

analyzer: taint tracking has no Ruby or JVM (Java/Kotlin) support about 2 hours ago

enhancement help wanted analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

ci: add an OpenSSF Scorecard workflow about 2 hours ago

enhancement good first issue testing

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

analyzer: Maven pom.xml dependency parsing doesn't resolve ${property} version placeholders about 2 hours ago

bug good first issue analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

analyzer: add NuGet (packages.lock.json) dependency inventory support about 2 hours ago

enhancement good first issue analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

analyzer: add Composer (composer.lock) dependency inventory support about 2 hours ago

enhancement good first issue analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

analyzer: wide-whitespace mutation defeats SKIL-PI-002/SKIL-EX-001/SKIL-PL-001 about 2 hours ago

bug good first issue analyzer

domehahn/skil

1

Vendor-neutral security, verification, and enforcement framework for AI agent skills

Go

#agent-skills#ai-security#devsecops#golang#in-toto#llm-security#mcp#sarif#security-scanner#slsa#static-analysis#supply-chain-security

Open Issues Need Help