mirror of
https://github.com/alirezarezvani/claude-skills.git
synced 2026-11-15 09:11:54 +00:00
The skill security audit's detect step only looked for SKILL.md one or two
folders deep, so plugin-layout skills and engineering/skills mirrors were
skipped, and its path filter missed eleven newer domains. Detection now
walks up to the nearest SKILL.md, the path filter is gone, and the audit
re-runs on ready_for_review.
Before turning it on, all 409 skills pass `--strict`:
- Fixed: full-page-screenshot pasted the output path into shell commands
and a generated Python script (execFileSync + JSON-quoted paths now);
senior-fullstack scaffolds fell back to hardcoded secrets when the env
var was unset (now required), and the scaffolder crashed on every
template (str / str).
- Cleaned: senior-security's __import__('datetime'), epic-design's
"You are now" opener.
- False positives marked with `noqa: SEC-AUDITOR (reason)`; the auditor
gains an auditor:ignore-start/end block for template-string text.
Bumps every changed plugin one patch above dev (G11).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01L8KYFLjaj5gnwaZdF3RyDn
|
||
|---|---|---|
| .. | ||
| .claude-plugin | ||
| skills/docker-development | ||