·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 18. Classified findings closed: 10. Classified findings remaining: 8. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 21.
10
5
3
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/cli-reference.md | Prompt Injection | — | High | Open | |
references/authentication.md | Supply Chain & Install-Time Trust | Install-time download and execute | High | Closed | |
references/authentication.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Closed | |
references/cli-reference.md | Tool & MCP Manipulation | Unauthorized tool use | High | Closed | |
SKILL.md | Malicious Code & Command Execution | Dynamic code execution | High | Open | |
references/cli-reference.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Closed | |
references/authentication.md | Tool & MCP Manipulation | Unauthorized tool use | High | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Open |
18 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/qu-skills/tools/infsh-cli:latest
MIT
HARDENING.md