Issues

• Upstream drift: NVIDIA/SkillSpector has commits this fork has not merged

  needs-triage
  rodrigorjsf/SkillSpector-Polyglot#144 · Filter by author github-actions opened on Oct 19, 2026

• reported_findings is now a delegation: one selection, two names, six call sites

  enhancementneeds-triage
  rodrigorjsf/SkillSpector-Polyglot#140 · Filter by author rodrigorjsf opened on Aug 22, 2026

• A --repo-scan whose every discovered Skill failed emits an invalid zero-run SARIF log

  bugneeds-triage
  rodrigorjsf/SkillSpector-Polyglot#138 · Filter by author rodrigorjsf opened on Aug 22, 2026

• Six emitted rule ids are undocumented, and two HIGH ones ship the catalogue's fallback prose

  bugneeds-triage
  rodrigorjsf/SkillSpector-Polyglot#134 · Filter by author rodrigorjsf opened on Aug 22, 2026
  1

• Deep Agents for JavaScript detection: a template literal quoting createDeepAgent fires the signal, so a Python repo loses all four DA-* Rules

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#127 · Filter by author rodrigorjsf opened on Aug 14, 2026
  1

• DA-* remediation text is written in Python and is emitted verbatim on TypeScript scans

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#126 · Filter by author rodrigorjsf opened on Aug 13, 2026
  1

• JSON and SARIF carry no signal that an advisory conformance finding was reported without being scored

  enhancementready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#125 · Filter by author rodrigorjsf opened on Aug 13, 2026
  1

• A v2 baseline fingerprint is bound to --no-llm: the meta stage rewrites five hashed Finding fields

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#124 · Filter by author rodrigorjsf opened on Aug 13, 2026
  2

• SPEC-15 reports a reference as missing when the file sits under a directory symlink the scan never descends

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#123 · Filter by author rodrigorjsf opened on Aug 13, 2026

• Spec-conformance applicability reads any nested SKILL.md as a skill directory, so a bundled template scores SPEC-4 and SPEC-17

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#121 · Filter by author rodrigorjsf opened on Aug 12, 2026

• SARIF rule shortDescription is the first Finding's message, not a description of the rule

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#118 · Filter by author rodrigorjsf opened on Aug 12, 2026
  1

• JSON report drops a Finding's message, so every instance-specific rule message is invisible to JSON consumers

  bugready-for-agent
  rodrigorjsf/SkillSpector-Polyglot#117 · Filter by author rodrigorjsf opened on Aug 12, 2026
  1

• License audit reads §4 facts from a dist-info that may not satisfy the declared version bound

  bugready-for-human
  rodrigorjsf/SkillSpector-Polyglot#113 · Filter by author rodrigorjsf opened on Aug 12, 2026