open/llm-security
1
0
Fork 0
Code Issues Releases 6 Activity

docs(scan): command description names the URLs git-clone accepts

Browse source 
The frontmatter description still said "GitHub repos"; git-clone.mjs has
accepted HTTPS on any host since v8.1.0 (SSH stays GitHub-only). The body
was already right. First wording ("HTTPS on any host") added a new
permission-mapper finding — `http` is a network-intent keyword — so the
description avoids the word. Measured on a temp copy of commands/scan.md,
old vs new: identical finding set (6), TRG ok/0 and SIG ok/0 on both.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-09-22 21:05:47 +02:00
commit 19775016a0
Signed by: ktg
SSH key fingerprint: SHA256:JakMjO6FTBBzN0Bhfj9saOoEjaFxlSdYuZQQpM/lF9Q
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
commands/scan.md
View file

@ -1,6 +1,6 @@
---
name: security:scan
description: Scan files, directories, or GitHub repos for security issues — secrets, injection vulnerabilities, supply chain risks, OWASP LLM patterns
description: Scan files, directories, or remote git repos (any host; SSH only for GitHub) for security issues — secrets, injection vulnerabilities, supply chain risks, OWASP LLM patterns
allowed-tools: Read, Glob, Grep, Bash, Agent
model: sonnet
---