·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content, deleted the lines high-severity poisoning findings flagged in 1 file before any model saw the skill, and independently checked the resulting changes. Classified findings before hardening: 18. Classified findings closed: 2. Classified findings remaining: 17 (1 introduced by hardening). Unclassified scanner findings remaining: 0. Review findings closed: 13. Review findings remaining: 0.
7
5
6
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/vuln-categories.md | Privilege Escalation & Host / Cloud Compromise | SSRF and cloud metadata access | High | Open | |
references/language-patterns.md | Improper Output Handling | — | High | Open | |
references/report-format.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Open | |
references/vuln-categories.md | Tool & MCP Manipulation | Unauthorized tool use | High | Open | |
SKILL.md | System Prompt / Instruction Leakage | — | High | Closed | |
references/vuln-categories.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Open | |
references/secret-patterns.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Open | |
references/vuln-categories.md | Malicious Code & Command Execution | — | Medium | Open |
19 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/security-review:latest
MIT
HARDENING.md