skills · Issues· 26 open

static-analysis: references/rulesets.md recommends p/express, which returns 404

static-analysis: files over 1 MB are dropped silently — the skill neither raises --max-target-bytes nor reports the skip

static-analysis: run-scans.sh expands --include globs against the CWD, silently dropping an extension

Windows packaging: CRLF makes every packaged Workflow unrunnable, and fp-check's Stop hook deadlocks the session (#205's fix never merged)

modern-python PATH shim silently fails bare python3 in Claude Code hook contexts

writing-lean-proofs: eval fixtures are never compiled, and two of them do not build

[Trophy] Code Execution in Obsidian Templater plugin

[Trophy] Cross-skill inconsistency: ASan memory-limit requirements not cross-referenced between aflpp and libfuzzer

Using trailofbits/skills as a test corpus — small parser-spec finding (SKILL.md version field)

fp-check Stop hook with matcher "*" fires on every unrelated session, causing forced LLM turns

for orgs with proprietary security skills, where do they live?

gh-cli shim: PATH walk fails inside Homebrew superenv

Consider listing in awesome-codex-plugins

Support for `Tolk` for `Smart Contract Security` plugins

devcontainer-setup may set up incorrect path?