chore(deps): update trailofbits/skills digest to a56045e

[renovate]

This PR contains the following updates:

Package	Update	Change
trailofbits/skills	digest	540111a → a56045e

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🛡️ Skill Security Scan Results

✅ agentic-actions-auditor

• Status: Passed
• Findings: 3

✅ codeql

• Status: Passed
• Findings: 3

✅ constant-time-analysis

• Status: Passed
• Findings: 3

✅ differential-review

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ fp-check

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ insecure-defaults

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ property-based-testing

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ sarif-parsing

• Status: Passed
• Findings: 4
• Allowed (not blocking): 1
  • ALLOWED_TOOLS_WRITE_VIOLATION (Allowed: SKILL.md declares Bash in allowed-tools, which transitively permits filesystem writes (e.g. via redirection); the scanner flags bundled scripts as writing without recognizing Bash as the intended mechanism.)

✅ semgrep

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ semgrep-rule-creator

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ semgrep-rule-variant-creator

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

❌ sharp-edges

• Status: Failed
• Findings: 5
• Blocking: 3

Blocking issues:

• [MDBLOCK_PYTHON_EVAL_EXEC] (HIGH) Code block in references/lang-python.md at line 35 contains potentially dangerous Python code. (references/lang-python.md:35)
• [MDBLOCK_PYTHON_EVAL_EXEC] (HIGH) Code block in references/lang-python.md at line 202 contains potentially dangerous Python code. (references/lang-python.md:202)
• [MDBLOCK_PYTHON_EVAL_EXEC] (HIGH) Code block in references/language-specific.md at line 483 contains potentially dangerous Python code. (references/language-specific.md:483)

✅ supply-chain-risk-auditor

• Status: Passed
• Findings: 4

✅ variant-analysis

• Status: Passed
• Findings: 1

❌ yara-rule-authoring

• Status: Failed
• Findings: 176
• Blocking: 154

Blocking issues:

• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: kill (SKILL.md:5)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: kill (SKILL.md:33)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: kill (SKILL.md:34)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: kill (SKILL.md:35)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: kill (SKILL.md:36)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:41)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: require, fetch, axios | Obfuscator signatures, eval (SKILL.md:55)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: postinstall, `dependenc (SKILL.md:56)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ` | VBA keywords | Macro auto-exec, enc (SKILL.md:57)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: vscode.workspace | Unc (SKILL.md:58)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ~/Library/LaunchAgents, `/Library/Launc (SKILL.md:79)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (SKILL.md:113)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: pay (SKILL.md:115)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: transfer (SKILL.md:122)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (SKILL.md:163)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: cmd (SKILL.md:181)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ` where strings inc (SKILL.md:203)
• [ATR_GOAL_HIJACKING] (HIGH) Pattern detected: Pivot to (SKILL.md:209)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: pay (SKILL.md:272)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: pay (SKILL.md:277)
• [ATR_GOAL_HIJACKING] (HIGH) Pattern detected: Pivot to (SKILL.md:279)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: nocase or wide speculatively** — only when you have confirmed evidence the case/enc (SKILL.md:308)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (SKILL.md:313)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:336)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:348)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:349)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (SKILL.md:356)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (SKILL.md:361)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:365)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: DexClassLoader reflection, enc (SKILL.md:404)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (SKILL.md:423)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Remove (SKILL.md:436)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: SHELL (SKILL.md:448)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: author, `referenc (SKILL.md:458)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:471)
• [PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: Gather samples** — Multiple samples; sin (SKILL.md:487)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (SKILL.md:548)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:559)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:562)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: { and valid escape sequenc (SKILL.md:565)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (SKILL.md:570)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (references/crx-module.md:35)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/crx-module.md:39)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: nativeMessaging | Communicate with local exec (references/crx-module.md:78)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: exfiltrat (references/crx-module.md:90)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/crx-module.md:179)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Exec (references/dex-module.md:3)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/dex-module.md:25)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/dex-module.md:137)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: exfiltrat (references/dex-module.md:230)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: exfiltrat (references/dex-module.md:346)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ` func (references/dex-module.md:358)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Kill (references/performance.md:33)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/performance.md:185)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/performance.md:188)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/performance.md:190)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/performance.md:191)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/performance.md:260)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/performance.md:261)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/performance.md:272)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/performance.md:283)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: cmd (references/strings.md:16)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/strings.md:17)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ascii | None | Default, always inc (references/strings.md:85)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: pay (references/strings.md:90)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/strings.md:119)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: cmd (references/strings.md:133)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: powershell (references/strings.md:134)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (references/strings.md:140)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/strings.md:149)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/strings.md:178)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/strings.md:183)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: cmd (references/strings.md:191)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: cmd (references/strings.md:192)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/strings.md:269)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (references/strings.md:276)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:324)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:328)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:353)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:373)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:376)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:378)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/strings.md:382)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: Exfiltrat (references/strings.md:384)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: SHELL (references/style-guide.md:13)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:17)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: SHELL (references/style-guide.md:25)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: shell (references/style-guide.md:26)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: SUSP_ | Suspicious | Lower confidenc (references/style-guide.md:28)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:43)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: drop (references/style-guide.md:44)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:57)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:58)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: PowerShell (references/style-guide.md:59)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: SHELL (references/style-guide.md:70)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:99)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:100)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: shell (references/style-guide.md:107)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:169)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/style-guide.md:183)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/style-guide.md:194)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: and instead of implicit conjunc (references/style-guide.md:201)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:55)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:135)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:147)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: exec (references/testing.md:172)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:179)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:197)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:204)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:212)
• [PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: Store usin (references/testing.md:214)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:218)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:231)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:241)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:265)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:290)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: cmd (references/testing.md:299)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: remove (references/testing.md:337)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: npm search --searchlimit=1000 | Avoid FPs on popular dependenc (references/testing.md:347)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (references/testing.md:356)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: eval (references/testing.md:376)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (references/testing.md:386)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: drop (workflows/rule-development.md:50)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:58)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:60)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:78)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:80)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:83)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:86)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:89)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:105)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:119)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Remove (workflows/rule-development.md:125)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:131)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:150)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (workflows/rule-development.md:163)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:174)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: author inc (workflows/rule-development.md:228)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: `referenc (workflows/rule-development.md:229)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:230)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: score reflects confidenc (workflows/rule-development.md:232)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:268)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (workflows/rule-development.md:280)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:282)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:283)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: format (workflows/rule-development.md:286)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:292)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: kill (workflows/rule-development.md:293)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:301)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:332)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:358)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:387)
• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: ```bash (workflows/rule-development.md:464)
• [ATR_HIGH_RISK_TOOL_GATE] (HIGH) Pattern detected: Format (workflows/rule-development.md:466)

Allowlisted (not blocking):

• MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

❌ zeroize-audit

• Status: Failed
• Findings: 7
• Blocking: 2

Blocking issues:

• [BEHAVIOR_EVAL_SUBPROCESS] (CRITICAL) Dangerous combination of code execution and system commands in /tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/generate_poc.py (/tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/generate_poc.py)
• [BEHAVIOR_EVAL_SUBPROCESS] (CRITICAL) Dangerous combination of code execution and system commands in /tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/scripts/check_rust_asm.py (/tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/scripts/check_rust_asm.py)

---

Summary: Scanned 16 skill(s), found 159 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.