Stingward v0.1.3

Added

• SKL011 flags reverse shells in skills and agent scripts (bash -i >& /dev/tcp/..., nc -e, socat exec:, Python pty.spawn, PowerShell TCPClient).
• SKL002 also catches downloading a file and running it on the same line (curl -o x ... && chmod +x x).
• SKL005 understands "follow the instructions on the page".

Changed

• SKL009 is high, not medium, when an install script downloads and runs code from the internet.
• SKL004 no longer treats env=dict(os.environ) as reading credentials: copying the environment to a child process is normal. Sending the whole environment (json=dict(os.environ), json.dumps(os.environ), params=os.environ) is still critical.

What's Changed

• Bump the actions group with 4 updates by @dependabot[bot] in #1

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v0.1.2...v0.1.3