Skill Scanner Files

Skill Scanner 2.2.2

This release improves static detection while keeping the measured false-positive rate steady on the pull-request development corpus.

Changes

• Detect whole process-environment value dumps in Python, JavaScript/TypeScript, and shell code. Targeted reads, keys-only enumeration, literal examples, and comments stay below the HIGH rule boundary.
• Avoid quadratic regex work on scripts padded with long runs of blank lines.
• Stop PG_PII_CREDIT_CARD from treating digits in decimal fractions as card numbers.
• Disable reasoning by default for short adjudicator verdicts and allow a separate output-token limit through SKILL_SCANNER_ADJUDICATOR_LLM_MAX_TOKENS.
• Update locked fsspec and multidict versions to resolve the two dependency audit findings.

Behavior notes

A shell prompt marker by itself no longer captures a command on the next line; prompt and command must share a line. The adjudicator's reasoning default is now disabled and can be overridden with SKILL_SCANNER_ADJUDICATOR_LLM_REASONING_EFFORT.

Validation

The PR detection-impact gate compares base and head on the same labelled development records and fixed real-skill sample, enforcing a 0.5 percentage point FPR-rise limit. On the combined change, benign flags stayed at 14/1,338 (1.05%) and real-skill flags at 130/2,000. The exact-SHA release evidence and mandatory release gate passed 3,551 checks. The release holdout compares CEL-off and active modes of this revision; both flagged 23/545 benign samples (4.22%).