docs(llm-security): SkillSpector gap analysis + reviewed execution plan

Brief + 8-step trekplan for 3 new dep-free scanners: TRG (trigger-abuse),
SIG (signature engine over the decode pipeline), AST (Python AST taint).
Adversarial review fixed 3 blockers + 7 majors on draft 1 (59/D -> 86/B).

STATE.md prepped as a self-contained cold-start for /trekexecute next session.
Un-gitignore STATE.md (global ~/.claude rule overrides old polyrepo convention);
ignore generated plan annotation HTML. No scanner code yet.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3s6WnubSSrFjAQTLQdVbG
This commit is contained in:
Kjell Tore Guttormsen 2026-06-20 09:00:24 +02:00
commit 8a772b0534
4 changed files with 780 additions and 2 deletions

8
.gitignore vendored
View file

@ -15,8 +15,9 @@ secrets.*
.local/
HANDOFF-FINDINGS.local.md
# --- session/local state (gitignored per ~/.claude polyrepo-konvensjon) ---
STATE.md
# --- session/local state ---
# NOTE: STATE.md is intentionally TRACKED and committed (global ~/.claude rule
# overrides the old polyrepo gitignore convention). Do NOT add STATE.md here.
REMEMBER.md
ROADMAP.md
TODO.md
@ -26,3 +27,6 @@ NEXT-SESSION-PROMPT*.local.md
*.local.sh
.DS_Store
.claude/
# Voyage-generated plan annotation HTML (regenerable via annotate.mjs)
docs/plans/*.html