Skip to content

SkillSpector v2.5.3

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Aug 07:26
v2.5.3
0562b96
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SkillSpector v2.5.3

Released: 2026-08-04

Summary

This patch release improves static-analysis accuracy and consistency. It reduces false positives for JavaScript and TypeScript regular-expression execution patterns and shares Python AST parsing across related analyzer steps.

Highlights

  • Avoid false positives from JavaScript and TypeScript RegExp.exec calls in output-handling analysis.
  • Reuse parsed Python ASTs across analyzer steps for more consistent environment-read detection.

Added

  • Shared Python AST parsing infrastructure for analyzer steps that inspect the same source file.

Changed

  • Environment-read detection and related static analysis now reuse parsed Python source information where available.

Fixed

  • Do not classify JavaScript and TypeScript regular-expression exec calls as unsafe output handling.

Security

  • None.

Breaking Changes and Migration

  • None.

Deprecations

  • None.

Validation

  • git diff --check c4eaaa467f192e46258aa615dc5447e3647e7fa6...HEAD — passed for each imported PR.
  • CI validation for imported GitHub PRs #341 and #332 — passed.

Known Limitations

  • None.

References

Assets 4
Loading