Skip to content

chore(deps): update trailofbits/skills digest to 7b9bd5f - #855

Open
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/trailofbits-skills-digest
Open

chore(deps): update trailofbits/skills digest to 7b9bd5f#855
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/trailofbits-skills-digest

Conversation

@renovate

@renovate renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
trailofbits/skills digest 696dee5 → 7b9bd5f

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@toolhive-release-app
chore(skills): bump spec.version for agentic-actions-auditor,codeql,c…
7767b1f 
…onstant-time-analysis,differential-review,fp-check,insecure-defaults,property-based-testing,sarif-parsing,semgrep,semgrep-rule-creator,semgrep-rule-variant-creator,sharp-edges,supply-chain-risk-auditor,variant-analysis,yara-rule-authoring,zeroize-audit
@toolhive-release-app

toolhive-release-app Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

🛡️ Skill Security Scan Results

✅ agentic-actions-auditor

  • Status: Passed
  • Findings: 75
  • Allowed (not blocking): 75
    • LLM_PROMPT_INJECTION (Allowed: FP: security audit skill whose reference files contain detailed attack patterns by design. The skill teaches agents to FIND these patterns in user workflows, not to execute them.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00263 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00081 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: agentic-actions-auditor is a security audit skill whose reference files intentionally describe CI/CD attack patterns (prompt injection, expression injection, subshell expansion, credential exfiltration) with PoC examples for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)

✅ codeql

  • Status: Passed
  • Findings: 244
  • Allowed (not blocking): 240
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • LLM_PROMPT_INJECTION (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • PG_PII_SSN_HARVESTING (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00051 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • LLM_CONTEXT_BUDGET_EXCEEDED (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00001 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00051 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: codeql is a security analysis skill whose reference files contain CodeQL workflow documentation, quality assessment commands, and performance tuning examples. All ATR pattern matches are documentation of analysis procedures, not agent instructions.)

✅ constant-time-analysis

  • Status: Passed
  • Findings: 2

✅ differential-review

  • Status: Passed
  • Findings: 5

✅ fp-check

  • Status: Passed
  • Findings: 5
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ property-based-testing

  • Status: Passed
  • Findings: 2

✅ sarif-parsing

  • Status: Passed
  • Findings: 6
  • Allowed (not blocking): 2
    • ALLOWED_TOOLS_WRITE_VIOLATION (Allowed: SKILL.md declares Bash in allowed-tools, which transitively permits filesystem writes (e.g. via redirection); the scanner flags bundled scripts as writing without recognizing Bash as the intended mechanism.)
    • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ semgrep

  • Status: Passed
  • Findings: 4

✅ semgrep-rule-creator

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • LLM_PROMPT_INJECTION (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)

✅ semgrep-rule-variant-creator

  • Status: Passed
  • Findings: 5

✅ sharp-edges

  • Status: Passed
  • Findings: 351
  • Allowed (not blocking): 351
    • LLM_PROMPT_INJECTION (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00140 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00085 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00112 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00050 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00050 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00161 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00065 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • MDBLOCK_PYTHON_EVAL_EXEC (Allowed: FP: sharp-edges reference files contain Python eval() and exec() examples showing dangerous API patterns for detection purposes — documentation of what to avoid, not executable within the skill.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00112 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00398 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • PG_PII_SSN_HARVESTING (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00085 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • MDBLOCK_PYTHON_EVAL_EXEC (Allowed: FP: sharp-edges reference files contain Python eval() and exec() examples showing dangerous API patterns for detection purposes — documentation of what to avoid, not executable within the skill.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • MDBLOCK_PYTHON_SUBPROCESS (Allowed: FP: sharp-edges reference files contain Python eval() and exec() examples showing dangerous API patterns for detection purposes — documentation of what to avoid, not executable within the skill.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00398 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00112 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00161 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00111 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00001 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00276 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • LLM_CONTEXT_BUDGET_EXCEEDED (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00062 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • MDBLOCK_PYTHON_EVAL_EXEC (Allowed: FP: sharp-edges reference files contain Python eval() and exec() examples showing dangerous API patterns for detection purposes — documentation of what to avoid, not executable within the skill.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00095 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00110 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00112 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: sharp-edges is a security audit skill whose reference files intentionally describe dangerous configuration patterns, crypto API misuse, and error-prone designs for detection purposes. All ATR pattern matches are documentation of what to detect, not agent instructions.)

❌ supply-chain-risk-auditor

  • Status: Failed
  • Findings: 6
  • Blocking: 2

Blocking issues:

  • [ATR_2026_00051] (HIGH) Pattern detected: For each (SKILL.md:47)
  • [ATR_2026_00051] (HIGH) Pattern detected: For each (SKILL.md:52)

Allowlisted (not blocking):

  • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ variant-analysis

  • Status: Passed
  • Findings: 5
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: trailofbits/skills is licensed CC-BY-SA-4.0 at the repository root; upstream does not embed a license field in per-skill SKILL.md frontmatter.)

✅ yara-rule-authoring

  • Status: Passed
  • Findings: 184
  • Allowed (not blocking): 181
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00161 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00161 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • LLM_CONTEXT_BUDGET_EXCEEDED (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • PG_PII_SSN_HARVESTING (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00004 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • LLM_CONTEXT_BUDGET_EXCEEDED (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • LLM_PROMPT_INJECTION (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • LLM_CONTEXT_BUDGET_EXCEEDED (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • LLM_CONTEXT_BUDGET_EXCEEDED (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00091 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00118 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00096 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00010 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00063 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00061 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00012 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00066 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00087 (Allowed: FP: same as policy_violation above — all pattern matches are on documentation, code examples, or attack pattern descriptions for detection purposes, not agent instructions.)
    • ATR_2026_00099 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)
    • ATR_2026_00040 (Allowed: FP: yara-rule-authoring is a security analysis skill whose reference files intentionally describe YARA detection patterns, testing commands, and deployment procedures. All ATR pattern matches are documentation of detection rule authoring, not agent instructions.)

❌ zeroize-audit

  • Status: Failed
  • Findings: 8
  • Blocking: 2

Blocking issues:

  • [BEHAVIOR_EVAL_SUBPROCESS] (CRITICAL) Dangerous combination of code execution and system commands in /tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/generate_poc.py (/tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/generate_poc.py)
  • [BEHAVIOR_EVAL_SUBPROCESS] (CRITICAL) Dangerous combination of code execution and system commands in /tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/scripts/check_rust_asm.py (/tmp/skill-scan-zeroize-audit/repo/plugins/zeroize-audit/skills/zeroize-audit/tools/scripts/check_rust_asm.py)

Summary: Scanned 15 skill(s), found 4 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.

@renovate

renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants