Skip to content

v6.4.0 - SkillSpector audit findings fix

Latest
Latest

Choose a tag to compare

View all tags
@EdwardWason EdwardWason released this 20 Jul 10:29
v6.4.0
2dd2c70

v6.4.0 - ClawHub SkillSpector Audit Findings Fix

Fixed

  • Finding 1 (Purpose & Capability): Removed "editing existing skills" from Do NOT, added R5 improvement route disclosure in description
  • Finding 2 (Instruction Scope): Removed explicit SkillHub API URL from composition-and-pipeline.md, updated permission table to disclose network access via TRAE built-in tools
  • Finding 3 (Persistence & Privilege): Added R5 existing-skill modification path disclosure in description and user warning

Changed

  • Version from 6.2.0 to 6.4.0 (skipped 6.3.0 due to ClawHub phantom success lock)
  • description: added improvement capability + optional capability disclosure
  • Permission table: network access from no to yes (TRAE built-in tools)

Full Changelog: v6.2.0...v6.4.0

Assets 2
Loading