·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content, removed allowed-tools entries that grant unscoped shell access or are not valid tool patterns, and independently checked the resulting changes. Classified findings before hardening: 3. Classified findings closed: 0. Classified findings remaining: 3. Unclassified scanner findings remaining: 0. Review findings closed: 8. Review findings remaining: 0.
1
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/app-planning.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Open | |
references/repo-and-validation.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open |
3 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/contentful/skills/contentful-apps/contentful-custom-app-from-scratch:latest
MIT
HARDENING.md