·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 23. Classified findings closed: 0. Classified findings remaining: 25 (2 introduced by hardening). Unclassified scanner findings remaining: 0. Review findings closed: 5. Review findings remaining: 16.
15
5
3
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
scripts/extract-endpoint-detail.sh | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Open | |
scripts/extract-endpoint-detail.sh | Supply Chain & Install-Time Trust | Install-time download and execute | High | Open | |
scripts/api-specs-context.sh | Malicious Code & Command Execution | — | High | Open | |
scripts/extract-tag-endpoints.sh | Malicious Code & Command Execution | Dynamic code execution | High | Open | |
SKILL.md | Malicious Code & Command Execution | Dynamic code execution | High | Open | |
scripts/extract-tag-endpoints.sh | Malicious Code & Command Execution | — | High | Open | |
scripts/api-specs-context.sh | Tool & MCP Manipulation | MCP over-permissioning | High | Introduced | |
scripts/extract-endpoint-detail.sh | Malicious Code & Command Execution | — | High | Open |
25 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/clerk/skills/core/clerk-backend-api:latest
MIT
HARDENING.md