{
  "scannedAt": "2026-07-20T21:37:56.590Z",
  "plugins": 258,
  "skills": 1801,
  "poisoned": 0,
  "accepted": 18,
  "advisories": 579,
  "pinDrift": 0,
  "fetchErrors": 0,
  "flagged": [],
  "acceptedDetail": [
    {
      "name": "agentforce-adlc:agentforce-generate",
      "findings": [
        "agentforce-generate: instruction-override"
      ],
      "class": "security-testing fixtures",
      "note": "Salesforce Agentforce docs ship attack strings as test payloads — per-file acceptance (#68) after two whole-skill lapses in one week (#65, #67), both re-reviews finding only unrelated docs churn; the fixture file is the reviewed bytes from those reads",
      "granularity": "finding-files"
    },
    {
      "name": "agentforce-adlc:agentforce-secure",
      "findings": [
        "agentforce-secure: instruction-override; system-prompt/secret extraction"
      ],
      "class": "security-testing fixtures",
      "note": "Salesforce Agentforce docs ship attack strings as test payloads — per-file acceptance (#68), fixture bytes identical to the 2026-07-09 review",
      "granularity": "finding-files"
    },
    {
      "name": "agentforce-adlc:agentforce-test",
      "findings": [
        "agentforce-test: instruction-override; jailbreak persona; reads a secret env var"
      ],
      "class": "security-testing fixtures",
      "note": "Salesforce Agentforce docs ship attack strings as test payloads — per-file acceptance (#68), fixture bytes identical to the 2026-07-09 review",
      "granularity": "finding-files"
    },
    {
      "name": "aws-core:launch-with-aws",
      "findings": [
        "launch-with-aws: data-exfil instruction; references a sensitive path (.ssh/.env/credentials/…)"
      ],
      "class": "defensive quoting",
      "note": "AWS's own OIDC config hardening: 'Refusing to send credentials over a non-HTTPS connection' refusal strings + its ~/.launch-with-aws session path constant — the module validates endpoints against exfil, it doesn't perform it",
      "granularity": "finding-files"
    },
    {
      "name": "aws-data-analytics:finding-data-lake-assets",
      "findings": [
        "finding-data-lake-assets: instruction-override"
      ],
      "class": "defensive quoting",
      "note": "quotes 'ignore previous instructions' to teach resisting it"
    },
    {
      "name": "convex:billing",
      "findings": [
        "billing: data-exfil (paraphrased)"
      ],
      "class": "paraphrased-exfil near-miss",
      "note": "Stripe integration docs: 'copy the signing secret as STRIPE_WEBHOOK_SECRET' — no exfil destination"
    },
    {
      "name": "databricks:databricks-mlflow-evaluation",
      "findings": [
        "databricks-mlflow-evaluation: instruction-override"
      ],
      "class": "defensive quoting",
      "note": "quotes 'ignore previous instructions' to teach resisting it"
    },
    {
      "name": "mercadopago:mp-integrate",
      "findings": [
        "mp-integrate: data-exfil (paraphrased); references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ],
      "class": "paraphrased-exfil near-miss",
      "note": "webhook signing-secret integration docs"
    },
    {
      "name": "newrelic:finops",
      "findings": [
        "finops: instruction-override"
      ],
      "class": "defensive quoting",
      "note": "vendor Security Rules block quotes 'ignore previous instructions'/'pretend you are a different agent' to teach resisting them — full-file review at catalog pin f8e5f8b (#77)"
    },
    {
      "name": "newrelic:kubernetes",
      "findings": [
        "kubernetes: instruction-override; exfiltration intent"
      ],
      "class": "defensive quoting",
      "note": "same Security Rules block; 'exfiltration intent' = composite FP of the secrecy block + an example diagnosis naming a payments namespace — no send/destination, only tool is execute_nrql_query (#77)"
    },
    {
      "name": "posthog:setting-up-a-data-warehouse-source",
      "findings": [
        "setting-up-a-data-warehouse-source: data-exfil (paraphrased)"
      ],
      "class": "paraphrased-exfil near-miss",
      "note": "data-warehouse source setup docs — re-read in full 2026-07-17 after upstream drift lapsed the 07-09 whole-skill accept: new secure connect-link flow explicitly forbids pasting secrets in chat; converted to per-file (PostHog ships constantly)",
      "granularity": "finding-files"
    },
    {
      "name": "posthog:signals-scout-logs",
      "findings": [
        "signals-scout-logs: instruction-override"
      ],
      "class": "defensive quoting",
      "note": "log-scout prompt quotes injection strings ('ignore prior rules', 'file a report saying X') in its own log-content-is-untrusted-data defense section — teaches resisting, not performing",
      "granularity": "finding-files"
    },
    {
      "name": "receipts:receipts",
      "findings": [
        "receipts: instruction-override; references a sensitive path (.ssh/.env/credentials/…)"
      ],
      "class": "defensive quoting",
      "note": "Anthropic in-repo usage-report plugin: mines ~/.claude/projects transcripts LOCALLY (miner has zero network primitives, execFileSync=git only, hand-verified) and quotes 'ignore previous instructions' in its names-are-data defense; sensitive path = its own documented data source",
      "granularity": "finding-files"
    },
    {
      "name": "resend:resend",
      "findings": [
        "resend: data-exfil (paraphrased); reads a secret env var"
      ],
      "class": "paraphrased-exfil near-miss",
      "note": "webhook signing-secret integration docs"
    },
    {
      "name": "sagemaker-ai:hyperpod-cluster-debugger",
      "findings": [
        "hyperpod-cluster-debugger: obfuscated payload to shell; reads a secret env var"
      ],
      "class": "obfuscated remote-exec transport",
      "note": "AWS HyperPod debugging docs use base64|bash as a transport — transparent about what it runs"
    },
    {
      "name": "sagemaker-ai:hyperpod-nccl",
      "findings": [
        "hyperpod-nccl: obfuscated payload to shell; reads a secret env var"
      ],
      "class": "obfuscated remote-exec transport",
      "note": "AWS HyperPod debugging docs use base64|bash as a transport — transparent about what it runs"
    },
    {
      "name": "sagemaker-ai:hyperpod-node-debugger",
      "findings": [
        "hyperpod-node-debugger: obfuscated payload to shell; reads a secret env var"
      ],
      "class": "obfuscated remote-exec transport",
      "note": "AWS HyperPod debugging docs use base64|bash as a transport — transparent about what it runs"
    },
    {
      "name": "sagemaker-ai:hyperpod-slurm-debugger",
      "findings": [
        "hyperpod-slurm-debugger: obfuscated payload to shell; reads a secret env var"
      ],
      "class": "obfuscated remote-exec transport",
      "note": "AWS HyperPod debugging docs use base64|bash as a transport — transparent about what it runs"
    }
  ],
  "advisoryDetail": [
    {
      "name": "42crunch-api-security-testing:generate-oas",
      "advisories": [
        "generate-oas: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "agentforce-adlc:agentforce-observe",
      "advisories": [
        "agentforce-observe: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-access-management",
      "advisories": [
        "alloydb-postgres-access-management: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-admin",
      "advisories": [
        "alloydb-postgres-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-data",
      "advisories": [
        "alloydb-postgres-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-health",
      "advisories": [
        "alloydb-postgres-health: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-monitor",
      "advisories": [
        "alloydb-postgres-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-optimize",
      "advisories": [
        "alloydb-postgres-optimize: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb:alloydb-postgres-replication",
      "advisories": [
        "alloydb-postgres-replication: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-access-control",
      "advisories": [
        "alloydb-omni-access-control: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-data",
      "advisories": [
        "alloydb-omni-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-health",
      "advisories": [
        "alloydb-omni-health: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-monitor",
      "advisories": [
        "alloydb-omni-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-optimize",
      "advisories": [
        "alloydb-omni-optimize: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-performance",
      "advisories": [
        "alloydb-omni-performance: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "alloydb-omni:alloydb-omni-replication",
      "advisories": [
        "alloydb-omni-replication: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "amazon-location-service:amazon-location-service",
      "advisories": [
        "amazon-location-service: reads a secret env var"
      ]
    },
    {
      "name": "amplitude:diagnose-errors",
      "advisories": [
        "diagnose-errors: exfiltration intent"
      ]
    },
    {
      "name": "amplitude:taxonomy",
      "advisories": [
        "taxonomy: exfiltration intent"
      ]
    },
    {
      "name": "apollo-skills:apollo-client",
      "advisories": [
        "apollo-client: reads a secret env var"
      ]
    },
    {
      "name": "apollo-skills:apollo-federation",
      "advisories": [
        "apollo-federation: reads a secret env var"
      ]
    },
    {
      "name": "apollo-skills:apollo-ios",
      "advisories": [
        "apollo-ios: reads a secret env var"
      ]
    },
    {
      "name": "apollo-skills:apollo-mcp-server",
      "advisories": [
        "apollo-mcp-server: reads a secret env var"
      ]
    },
    {
      "name": "apollo-skills:apollo-router",
      "advisories": [
        "apollo-router: reads a secret env var"
      ]
    },
    {
      "name": "apollo-skills:graphql-schema",
      "advisories": [
        "graphql-schema: exfiltration intent"
      ]
    },
    {
      "name": "apollo-skills:rover",
      "advisories": [
        "rover: reads a secret env var"
      ]
    },
    {
      "name": "appwrite:php",
      "advisories": [
        "php: reads a secret env var"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:airflow",
      "advisories": [
        "airflow: reads a secret env var"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:airflow-plugins",
      "advisories": [
        "airflow-plugins: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:analyzing-data",
      "advisories": [
        "analyzing-data: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:configuring-airflow-language-sdks",
      "advisories": [
        "configuring-airflow-language-sdks: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:delegating-to-otto",
      "advisories": [
        "delegating-to-otto: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:deploying-go-sdk-bundles",
      "advisories": [
        "deploying-go-sdk-bundles: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:deploying-java-sdk-bundles",
      "advisories": [
        "deploying-java-sdk-bundles: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:migrating-ai-sdk-to-common-ai",
      "advisories": [
        "migrating-ai-sdk-to-common-ai: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:migrating-dagster-to-airflow",
      "advisories": [
        "migrating-dagster-to-airflow: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "astronomer-data-agents/astronomer-data:troubleshooting-astro-deployments",
      "advisories": [
        "troubleshooting-astro-deployments: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "atomic-agents:framework",
      "advisories": [
        "framework: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "atomic-agents:new-app",
      "advisories": [
        "new-app: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "auth0:auth0",
      "advisories": [
        "auth0: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-agents:agents-build",
      "advisories": [
        "agents-build: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-agents:agents-connect",
      "advisories": [
        "agents-connect: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-agents:agents-get-started",
      "advisories": [
        "agents-get-started: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-agents:agents-harden",
      "advisories": [
        "agents-harden: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-agents-for-devsecops:setup-devops-agent",
      "advisories": [
        "setup-devops-agent: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-amplify:amplify-workflow",
      "advisories": [
        "amplify-workflow: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-core:amazon-bedrock",
      "advisories": [
        "amazon-bedrock: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-core:aws-billing-and-cost-management",
      "advisories": [
        "aws-billing-and-cost-management: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-blocks",
      "advisories": [
        "aws-blocks: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-cdk",
      "advisories": [
        "aws-cdk: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-core:aws-compute",
      "advisories": [
        "aws-compute: exfiltration intent"
      ]
    },
    {
      "name": "aws-core:aws-containers",
      "advisories": [
        "aws-containers: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-core:aws-deployment",
      "advisories": [
        "aws-deployment: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-iam",
      "advisories": [
        "aws-iam: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-observability",
      "advisories": [
        "aws-observability: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-sdk-js-v3-usage",
      "advisories": [
        "aws-sdk-js-v3-usage: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-sdk-python-usage",
      "advisories": [
        "aws-sdk-python-usage: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:aws-secrets-manager",
      "advisories": [
        "aws-secrets-manager: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-core:signing-in-to-aws",
      "advisories": [
        "signing-in-to-aws: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-data-analytics:amazon-opensearch-service",
      "advisories": [
        "amazon-opensearch-service: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "aws-dev-toolkit:api-gateway",
      "advisories": [
        "api-gateway: reads a secret env var"
      ]
    },
    {
      "name": "aws-dev-toolkit:cloudfront",
      "advisories": [
        "cloudfront: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-dev-toolkit:ec2",
      "advisories": [
        "ec2: exfiltration intent"
      ]
    },
    {
      "name": "aws-dev-toolkit:eks",
      "advisories": [
        "eks: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-dev-toolkit:migration-apprunner-to-ecs-express",
      "advisories": [
        "migration-apprunner-to-ecs-express: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-dev-toolkit:rds-aurora",
      "advisories": [
        "rds-aurora: exfiltration intent"
      ]
    },
    {
      "name": "aws-dev-toolkit:s3",
      "advisories": [
        "s3: exfiltration intent"
      ]
    },
    {
      "name": "aws-dev-toolkit:well-architected",
      "advisories": [
        "well-architected: reads a secret env var"
      ]
    },
    {
      "name": "aws-serverless:api-gateway",
      "advisories": [
        "api-gateway: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-serverless:aws-lambda-managed-instances",
      "advisories": [
        "aws-lambda-managed-instances: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-serverless:aws-lambda-microvms",
      "advisories": [
        "aws-lambda-microvms: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-serverless:aws-serverless-deployment",
      "advisories": [
        "aws-serverless-deployment: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-serverless:aws-step-functions",
      "advisories": [
        "aws-step-functions: reads a secret env var"
      ]
    },
    {
      "name": "aws-startup-advisor:architect-for-startups",
      "advisories": [
        "architect-for-startups: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-startup-advisor:knowledge-base-for-startups",
      "advisories": [
        "knowledge-base-for-startups: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "aws-startup-advisor:migration-to-aws",
      "advisories": [
        "migration-to-aws: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-startup-advisor:prompt-library-for-startups",
      "advisories": [
        "prompt-library-for-startups: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "aws-transform:aws-transform",
      "advisories": [
        "aws-transform: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "azure:airunway-aks-setup",
      "advisories": [
        "airunway-aks-setup: reads a secret env var"
      ]
    },
    {
      "name": "azure:appinsights-instrumentation",
      "advisories": [
        "appinsights-instrumentation: reads a secret env var"
      ]
    },
    {
      "name": "azure:azure-cloud-migrate",
      "advisories": [
        "azure-cloud-migrate: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "azure:azure-compute",
      "advisories": [
        "azure-compute: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "azure:azure-cost",
      "advisories": [
        "azure-cost: exfiltration intent"
      ]
    },
    {
      "name": "azure:azure-deploy",
      "advisories": [
        "azure-deploy: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "azure:azure-diagnostics",
      "advisories": [
        "azure-diagnostics: exfiltration intent"
      ]
    },
    {
      "name": "azure:azure-enterprise-infra-planner",
      "advisories": [
        "azure-enterprise-infra-planner: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "azure:azure-prepare",
      "advisories": [
        "azure-prepare: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "azure:azure-reliability",
      "advisories": [
        "azure-reliability: reads a secret env var"
      ]
    },
    {
      "name": "azure:azure-upgrade",
      "advisories": [
        "azure-upgrade: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "azure:azure-validate",
      "advisories": [
        "azure-validate: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "azure:entra-agent-id",
      "advisories": [
        "entra-agent-id: reads a secret env var"
      ]
    },
    {
      "name": "azure:entra-app-registration",
      "advisories": [
        "entra-app-registration: reads a secret env var"
      ]
    },
    {
      "name": "azure:microsoft-foundry",
      "advisories": [
        "microsoft-foundry: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "azure:python-appservice-deploy",
      "advisories": [
        "python-appservice-deploy: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "azure-cosmos-db-assistant:cosmosdb-best-practices",
      "advisories": [
        "cosmosdb-best-practices: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "base44:base44-cli",
      "advisories": [
        "base44-cli: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "base44:base44-remote-dev",
      "advisories": [
        "base44-remote-dev: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "base44:base44-sandbox",
      "advisories": [
        "base44-sandbox: reads a secret env var"
      ]
    },
    {
      "name": "base44:base44-sdk",
      "advisories": [
        "base44-sdk: reads a secret env var"
      ]
    },
    {
      "name": "base44/base44-sandbox:base44-cli",
      "advisories": [
        "base44-cli: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "base44/base44-sandbox:base44-remote-dev",
      "advisories": [
        "base44-remote-dev: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "base44/base44-sandbox:base44-sandbox",
      "advisories": [
        "base44-sandbox: reads a secret env var"
      ]
    },
    {
      "name": "base44/base44-sandbox:base44-sdk",
      "advisories": [
        "base44-sdk: reads a secret env var"
      ]
    },
    {
      "name": "bigquery-data-analytics:bigquery-analytics",
      "advisories": [
        "bigquery-analytics: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "bigquery-data-analytics:bigquery-data",
      "advisories": [
        "bigquery-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "box:box",
      "advisories": [
        "box: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:agent-onboarding",
      "advisories": [
        "agent-onboarding: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:brd-browser-debug",
      "advisories": [
        "brd-browser-debug: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:bright-data-best-practices",
      "advisories": [
        "bright-data-best-practices: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:bright-data-mcp",
      "advisories": [
        "bright-data-mcp: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "brightdata-plugin:brightdata-cli",
      "advisories": [
        "brightdata-cli: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "brightdata-plugin:competitive-intel",
      "advisories": [
        "competitive-intel: exfiltration intent"
      ]
    },
    {
      "name": "brightdata-plugin:design-mirror",
      "advisories": [
        "design-mirror: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:discover-api",
      "advisories": [
        "discover-api: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:proxy",
      "advisories": [
        "proxy: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:rag-pipeline",
      "advisories": [
        "rag-pipeline: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:scrape",
      "advisories": [
        "scrape: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:scraper-builder",
      "advisories": [
        "scraper-builder: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:scraper-studio",
      "advisories": [
        "scraper-studio: reads a secret env var"
      ]
    },
    {
      "name": "brightdata-plugin:search",
      "advisories": [
        "search: reads a secret env var"
      ]
    },
    {
      "name": "buildkite:buildkite-agent-runtime",
      "advisories": [
        "buildkite-agent-runtime: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "buildkite:buildkite-api",
      "advisories": [
        "buildkite-api: reads a secret env var"
      ]
    },
    {
      "name": "buildkite:buildkite-cli",
      "advisories": [
        "buildkite-cli: reads a secret env var"
      ]
    },
    {
      "name": "buildkite:buildkite-pipelines",
      "advisories": [
        "buildkite-pipelines: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:add-company",
      "advisories": [
        "add-company: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:add-contact",
      "advisories": [
        "add-contact: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:add-deal",
      "advisories": [
        "add-deal: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:add-fundraising",
      "advisories": [
        "add-fundraising: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:add-investor",
      "advisories": [
        "add-investor: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:add-note",
      "advisories": [
        "add-note: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:search-companies",
      "advisories": [
        "search-companies: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:search-contacts",
      "advisories": [
        "search-contacts: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:search-deals",
      "advisories": [
        "search-deals: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:search-fundraisings",
      "advisories": [
        "search-fundraisings: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:search-investors",
      "advisories": [
        "search-investors: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:search-notes",
      "advisories": [
        "search-notes: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:tutorial",
      "advisories": [
        "tutorial: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "carta-crm:update-company",
      "advisories": [
        "update-company: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:update-contact",
      "advisories": [
        "update-contact: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:update-deal",
      "advisories": [
        "update-deal: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:update-fundraising",
      "advisories": [
        "update-fundraising: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:update-investor",
      "advisories": [
        "update-investor: reads a secret env var"
      ]
    },
    {
      "name": "carta-crm:update-note",
      "advisories": [
        "update-note: reads a secret env var"
      ]
    },
    {
      "name": "carta-investors:carta-co-investors",
      "advisories": [
        "carta-co-investors: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "carta-investors:carta-soi",
      "advisories": [
        "carta-soi: exfiltration intent"
      ]
    },
    {
      "name": "chrome-devtools-mcp:memory-leak-debugging",
      "advisories": [
        "memory-leak-debugging: exfiltration intent"
      ]
    },
    {
      "name": "circle-skills/circle:bridge-stablecoin",
      "advisories": [
        "bridge-stablecoin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "circle-skills/circle:swap-tokens",
      "advisories": [
        "swap-tokens: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "circle-skills/circle:unify-balance",
      "advisories": [
        "unify-balance: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "circle-skills/circle:use-arc",
      "advisories": [
        "use-arc: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "circle-skills/circle:use-developer-controlled-wallets",
      "advisories": [
        "use-developer-controlled-wallets: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "circle-skills/circle:use-gateway",
      "advisories": [
        "use-gateway: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "circle-skills/circle:use-modular-wallets",
      "advisories": [
        "use-modular-wallets: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "circle-skills/circle:use-smart-contract-platform",
      "advisories": [
        "use-smart-contract-platform: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "circle-skills/circle:use-usdc",
      "advisories": [
        "use-usdc: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "circle-skills/circle:use-user-controlled-wallets",
      "advisories": [
        "use-user-controlled-wallets: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "claude-code-setup:claude-automation-recommender",
      "advisories": [
        "claude-automation-recommender: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "claude-md-management:claude-md-improver",
      "advisories": [
        "claude-md-improver: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "clickhouse:clickhouse-best-practices",
      "advisories": [
        "clickhouse-best-practices: reads a secret env var"
      ]
    },
    {
      "name": "clickhouse-best-practices:clickhouse-best-practices",
      "advisories": [
        "clickhouse-best-practices: reads a secret env var"
      ]
    },
    {
      "name": "clickhouse-best-practices:clickhouse-js-node-coding",
      "advisories": [
        "clickhouse-js-node-coding: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "clickhouse-best-practices:clickhouse-js-node-rowbinary",
      "advisories": [
        "clickhouse-js-node-rowbinary: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "clickhouse-best-practices:clickhouse-managed-postgres-rca",
      "advisories": [
        "clickhouse-managed-postgres-rca: reads a secret env var"
      ]
    },
    {
      "name": "clickhouse-best-practices:clickhousectl-cloud-deploy",
      "advisories": [
        "clickhousectl-cloud-deploy: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "clickhouse-best-practices:clickstack-otel-collector",
      "advisories": [
        "clickstack-otel-collector: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "cloud-sql-mysql:cloud-sql-mysql-admin",
      "advisories": [
        "cloud-sql-mysql-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-mysql:cloud-sql-mysql-data",
      "advisories": [
        "cloud-sql-mysql-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-mysql:cloud-sql-mysql-lifecycle",
      "advisories": [
        "cloud-sql-mysql-lifecycle: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-mysql:cloud-sql-mysql-monitor",
      "advisories": [
        "cloud-sql-mysql-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-admin",
      "advisories": [
        "cloud-sql-postgres-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-data",
      "advisories": [
        "cloud-sql-postgres-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-health",
      "advisories": [
        "cloud-sql-postgres-health: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-lifecycle",
      "advisories": [
        "cloud-sql-postgres-lifecycle: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-monitor",
      "advisories": [
        "cloud-sql-postgres-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-replication",
      "advisories": [
        "cloud-sql-postgres-replication: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-vectorassist",
      "advisories": [
        "cloud-sql-postgres-vectorassist: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-postgresql:cloud-sql-postgres-view-config",
      "advisories": [
        "cloud-sql-postgres-view-config: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-sqlserver:cloud-sql-sqlserver-admin",
      "advisories": [
        "cloud-sql-sqlserver-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-sqlserver:cloud-sql-sqlserver-data",
      "advisories": [
        "cloud-sql-sqlserver-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-sqlserver:cloud-sql-sqlserver-lifecycle",
      "advisories": [
        "cloud-sql-sqlserver-lifecycle: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloud-sql-sqlserver:cloud-sql-sqlserver-monitor",
      "advisories": [
        "cloud-sql-sqlserver-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloudflare:cloudflare",
      "advisories": [
        "cloudflare: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "cloudflare:cloudflare-email-service",
      "advisories": [
        "cloudflare-email-service: reads a secret env var"
      ]
    },
    {
      "name": "cloudflare:turnstile-spin",
      "advisories": [
        "turnstile-spin: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "cloudflare:workers-best-practices",
      "advisories": [
        "workers-best-practices: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "cloudflare:wrangler",
      "advisories": [
        "wrangler: reads a secret env var"
      ]
    },
    {
      "name": "coderabbit:autofix",
      "advisories": [
        "autofix: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "confidence:migrate-eppo",
      "advisories": [
        "migrate-eppo: reads a secret env var"
      ]
    },
    {
      "name": "confidence:migrate-optimizely",
      "advisories": [
        "migrate-optimizely: reads a secret env var"
      ]
    },
    {
      "name": "confidence:migrate-statsig",
      "advisories": [
        "migrate-statsig: reads a secret env var"
      ]
    },
    {
      "name": "confidence:onboard-confidence",
      "advisories": [
        "onboard-confidence: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "confidence:setup-warehouse-databricks",
      "advisories": [
        "setup-warehouse-databricks: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "confidence:setup-warehouse-redshift",
      "advisories": [
        "setup-warehouse-redshift: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "confidence:setup-warehouse-snowflake",
      "advisories": [
        "setup-warehouse-snowflake: reads a secret env var"
      ]
    },
    {
      "name": "convex:convex-authz",
      "advisories": [
        "convex-authz: exfiltration intent"
      ]
    },
    {
      "name": "convex:env",
      "advisories": [
        "env: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "crowdstrike-falcon-foundry:collections-development",
      "advisories": [
        "collections-development: exfiltration intent"
      ]
    },
    {
      "name": "crowdstrike-falcon-foundry:development-workflow",
      "advisories": [
        "development-workflow: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "crowdstrike-falcon-foundry:e2e-testing",
      "advisories": [
        "e2e-testing: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "crowdstrike-falcon-foundry:functions-development",
      "advisories": [
        "functions-development: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "crowdstrike-falcon-foundry:security-patterns",
      "advisories": [
        "security-patterns: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "crowdstrike-falcon-foundry:workflows-development",
      "advisories": [
        "workflows-development: reads a secret env var"
      ]
    },
    {
      "name": "cwc-makers:m5-onboard",
      "advisories": [
        "m5-onboard: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:airflow",
      "advisories": [
        "airflow: reads a secret env var"
      ]
    },
    {
      "name": "data/astronomer-data:airflow-plugins",
      "advisories": [
        "airflow-plugins: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:analyzing-data",
      "advisories": [
        "analyzing-data: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "data/astronomer-data:configuring-airflow-language-sdks",
      "advisories": [
        "configuring-airflow-language-sdks: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:delegating-to-otto",
      "advisories": [
        "delegating-to-otto: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:deploying-go-sdk-bundles",
      "advisories": [
        "deploying-go-sdk-bundles: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:deploying-java-sdk-bundles",
      "advisories": [
        "deploying-java-sdk-bundles: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:migrating-ai-sdk-to-common-ai",
      "advisories": [
        "migrating-ai-sdk-to-common-ai: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:migrating-dagster-to-airflow",
      "advisories": [
        "migrating-dagster-to-airflow: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data/astronomer-data:troubleshooting-astro-deployments",
      "advisories": [
        "troubleshooting-astro-deployments: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-access-control",
      "advisories": [
        "alloydb-omni-access-control: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-data",
      "advisories": [
        "alloydb-omni-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-health",
      "advisories": [
        "alloydb-omni-health: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-monitor",
      "advisories": [
        "alloydb-omni-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-optimize",
      "advisories": [
        "alloydb-omni-optimize: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-performance",
      "advisories": [
        "alloydb-omni-performance: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-omni-replication",
      "advisories": [
        "alloydb-omni-replication: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-access-management",
      "advisories": [
        "alloydb-postgres-access-management: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-admin",
      "advisories": [
        "alloydb-postgres-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-data",
      "advisories": [
        "alloydb-postgres-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-health",
      "advisories": [
        "alloydb-postgres-health: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-monitor",
      "advisories": [
        "alloydb-postgres-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-optimize",
      "advisories": [
        "alloydb-postgres-optimize: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:alloydb-postgres-replication",
      "advisories": [
        "alloydb-postgres-replication: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-mysql-admin",
      "advisories": [
        "cloud-sql-mysql-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-mysql-data",
      "advisories": [
        "cloud-sql-mysql-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-mysql-lifecycle",
      "advisories": [
        "cloud-sql-mysql-lifecycle: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-mysql-monitor",
      "advisories": [
        "cloud-sql-mysql-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-admin",
      "advisories": [
        "cloud-sql-postgres-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-data",
      "advisories": [
        "cloud-sql-postgres-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-health",
      "advisories": [
        "cloud-sql-postgres-health: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-lifecycle",
      "advisories": [
        "cloud-sql-postgres-lifecycle: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-monitor",
      "advisories": [
        "cloud-sql-postgres-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-replication",
      "advisories": [
        "cloud-sql-postgres-replication: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-vectorassist",
      "advisories": [
        "cloud-sql-postgres-vectorassist: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-postgres-view-config",
      "advisories": [
        "cloud-sql-postgres-view-config: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-sqlserver-admin",
      "advisories": [
        "cloud-sql-sqlserver-admin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-sqlserver-data",
      "advisories": [
        "cloud-sql-sqlserver-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-sqlserver-lifecycle",
      "advisories": [
        "cloud-sql-sqlserver-lifecycle: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:cloud-sql-sqlserver-monitor",
      "advisories": [
        "cloud-sql-sqlserver-monitor: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:dataform-bigquery",
      "advisories": [
        "dataform-bigquery: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:federate-lakehouse-catalog",
      "advisories": [
        "federate-lakehouse-catalog: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:firestore-data",
      "advisories": [
        "firestore-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-agent-kit-starter-pack/dak:spanner-data",
      "advisories": [
        "spanner-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:airflow",
      "advisories": [
        "airflow: reads a secret env var"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:airflow-plugins",
      "advisories": [
        "airflow-plugins: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:analyzing-data",
      "advisories": [
        "analyzing-data: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:configuring-airflow-language-sdks",
      "advisories": [
        "configuring-airflow-language-sdks: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:delegating-to-otto",
      "advisories": [
        "delegating-to-otto: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:deploying-go-sdk-bundles",
      "advisories": [
        "deploying-go-sdk-bundles: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:deploying-java-sdk-bundles",
      "advisories": [
        "deploying-java-sdk-bundles: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:migrating-ai-sdk-to-common-ai",
      "advisories": [
        "migrating-ai-sdk-to-common-ai: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:migrating-dagster-to-airflow",
      "advisories": [
        "migrating-dagster-to-airflow: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "data-engineering/astronomer-data:troubleshooting-astro-deployments",
      "advisories": [
        "troubleshooting-astro-deployments: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "databases-on-aws:dsql",
      "advisories": [
        "dsql: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "databricks:databricks-apps",
      "advisories": [
        "databricks-apps: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "databricks:databricks-lakebase",
      "advisories": [
        "databricks-lakebase: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "databricks:databricks-ml-training",
      "advisories": [
        "databricks-ml-training: exfiltration intent"
      ]
    },
    {
      "name": "databricks:databricks-model-serving",
      "advisories": [
        "databricks-model-serving: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "databricks:databricks-unstructured-pdf-generation",
      "advisories": [
        "databricks-unstructured-pdf-generation: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "databricks:databricks-zerobus-ingest",
      "advisories": [
        "databricks-zerobus-ingest: reads a secret env var"
      ]
    },
    {
      "name": "datahub-skills:datahub-connector-planning",
      "advisories": [
        "datahub-connector-planning: reads a secret env var"
      ]
    },
    {
      "name": "dataproc:dataproc-skills",
      "advisories": [
        "dataproc-skills: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "datarobot-agent-skills:datarobot-agent-assist",
      "advisories": [
        "datarobot-agent-assist: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "datarobot-agent-skills:datarobot-app-framework-cicd",
      "advisories": [
        "datarobot-app-framework-cicd: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "datarobot-agent-skills:datarobot-discover",
      "advisories": [
        "datarobot-discover: reads a secret env var"
      ]
    },
    {
      "name": "datarobot-agent-skills:datarobot-external-agent-monitoring",
      "advisories": [
        "datarobot-external-agent-monitoring: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "datarobot-agent-skills:datarobot-setup",
      "advisories": [
        "datarobot-setup: reads a secret env var"
      ]
    },
    {
      "name": "datarobot-agent-skills:datarobot-workload-api",
      "advisories": [
        "datarobot-workload-api: reads a secret env var"
      ]
    },
    {
      "name": "dataverse:dv-connect",
      "advisories": [
        "dv-connect: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "dataverse:dv-metadata",
      "advisories": [
        "dv-metadata: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "dataverse:dv-overview",
      "advisories": [
        "dv-overview: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "desktop-commander:ai-tools-setup",
      "advisories": [
        "ai-tools-setup: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "discord:access",
      "advisories": [
        "access: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "discord:configure",
      "advisories": [
        "configure: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "dominodatalab:apps",
      "advisories": [
        "apps: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:data-connectivity",
      "advisories": [
        "data-connectivity: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:domino-governance",
      "advisories": [
        "domino-governance: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:domino-ui-bootstrap",
      "advisories": [
        "domino-ui-bootstrap: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "dominodatalab:domino-ui-design",
      "advisories": [
        "domino-ui-design: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:jobs",
      "advisories": [
        "jobs: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:model-endpoints",
      "advisories": [
        "model-endpoints: exfiltration intent"
      ]
    },
    {
      "name": "dominodatalab:modeling-assistant",
      "advisories": [
        "modeling-assistant: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:netapp-volumes",
      "advisories": [
        "netapp-volumes: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:python-sdk",
      "advisories": [
        "python-sdk: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:tags-and-properties",
      "advisories": [
        "tags-and-properties: reads a secret env var"
      ]
    },
    {
      "name": "dominodatalab:workspaces",
      "advisories": [
        "workspaces: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "duckdb-skills:read-memories",
      "advisories": [
        "read-memories: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "expo:eas-hosting",
      "advisories": [
        "eas-hosting: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "expo:eas-simulator",
      "advisories": [
        "eas-simulator: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "expo:expo-data-fetching",
      "advisories": [
        "expo-data-fetching: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "expo:expo-examples",
      "advisories": [
        "expo-examples: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "fastly-agent-toolkit:fastlike",
      "advisories": [
        "fastlike: exfiltration intent"
      ]
    },
    {
      "name": "fastly-agent-toolkit:fastly",
      "advisories": [
        "fastly: reads a secret env var"
      ]
    },
    {
      "name": "fastly-agent-toolkit:fastly-cli",
      "advisories": [
        "fastly-cli: reads a secret env var"
      ]
    },
    {
      "name": "fastly-agent-toolkit:fastly-fiddle",
      "advisories": [
        "fastly-fiddle: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "fastly-agent-toolkit:fastly-ngwaf",
      "advisories": [
        "fastly-ngwaf: reads a secret env var"
      ]
    },
    {
      "name": "fiftyone:fiftyone-eval-plugin",
      "advisories": [
        "fiftyone-eval-plugin: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "fiftyone:fiftyone-zoo-remote-model",
      "advisories": [
        "fiftyone-zoo-remote-model: exfiltration intent"
      ]
    },
    {
      "name": "figma:figma-generate-library",
      "advisories": [
        "figma-generate-library: reads a secret env var"
      ]
    },
    {
      "name": "figma:figma-use",
      "advisories": [
        "figma-use: reads a secret env var"
      ]
    },
    {
      "name": "firecrawl:firecrawl-cli",
      "advisories": [
        "firecrawl-cli: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "firestore-native:firestore-data",
      "advisories": [
        "firestore-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "forge-skills:forge-connector",
      "advisories": [
        "forge-connector: reads a secret env var"
      ]
    },
    {
      "name": "forge-skills:forge-security-review",
      "advisories": [
        "forge-security-review: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "grafana-assistant:grafana-assistant-cli",
      "advisories": [
        "grafana-assistant-cli: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "grafana-mcp:grafana-mcp-tools",
      "advisories": [
        "grafana-mcp-tools: reads a secret env var"
      ]
    },
    {
      "name": "honeycomb:otel-genai-instrumentation",
      "advisories": [
        "otel-genai-instrumentation: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "honeycomb:otel-instrumentation",
      "advisories": [
        "otel-instrumentation: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "honeycomb:query-patterns",
      "advisories": [
        "query-patterns: exfiltration intent"
      ]
    },
    {
      "name": "hookify:writing-rules",
      "advisories": [
        "writing-rules: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "huggingface-skills:hf-cli",
      "advisories": [
        "hf-cli: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:hf-cloud-aws-context-discovery",
      "advisories": [
        "hf-cloud-aws-context-discovery: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "huggingface-skills:hf-cloud-serving-image-selection",
      "advisories": [
        "hf-cloud-serving-image-selection: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-datasets",
      "advisories": [
        "huggingface-datasets: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-llm-trainer",
      "advisories": [
        "huggingface-llm-trainer: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-lora-space-builder",
      "advisories": [
        "huggingface-lora-space-builder: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-paper-publisher",
      "advisories": [
        "huggingface-paper-publisher: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-papers",
      "advisories": [
        "huggingface-papers: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-spaces",
      "advisories": [
        "huggingface-spaces: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-tool-builder",
      "advisories": [
        "huggingface-tool-builder: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-vision-trainer",
      "advisories": [
        "huggingface-vision-trainer: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:huggingface-zerogpu",
      "advisories": [
        "huggingface-zerogpu: exfiltration intent"
      ]
    },
    {
      "name": "huggingface-skills:train-sentence-transformers",
      "advisories": [
        "train-sentence-transformers: reads a secret env var"
      ]
    },
    {
      "name": "huggingface-skills:transformers-js",
      "advisories": [
        "transformers-js: reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:embedded-captions",
      "advisories": [
        "embedded-captions: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:faceless-explainer",
      "advisories": [
        "faceless-explainer: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:figma",
      "advisories": [
        "figma: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:hyperframes-animation",
      "advisories": [
        "hyperframes-animation: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "hyperframes:hyperframes-cli",
      "advisories": [
        "hyperframes-cli: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:hyperframes-core",
      "advisories": [
        "hyperframes-core: exfiltration intent"
      ]
    },
    {
      "name": "hyperframes:hyperframes-creative",
      "advisories": [
        "hyperframes-creative: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "hyperframes:hyperframes-registry",
      "advisories": [
        "hyperframes-registry: exfiltration intent"
      ]
    },
    {
      "name": "hyperframes:media-use",
      "advisories": [
        "media-use: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:motion-graphics",
      "advisories": [
        "motion-graphics: reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:music-to-video",
      "advisories": [
        "music-to-video: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "hyperframes:pr-to-video",
      "advisories": [
        "pr-to-video: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:product-launch-video",
      "advisories": [
        "product-launch-video: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "hyperframes:remotion-to-hyperframes",
      "advisories": [
        "remotion-to-hyperframes: reads a secret env var"
      ]
    },
    {
      "name": "idmp-plugin:idmp-analysis",
      "advisories": [
        "idmp-analysis: exfiltration intent"
      ]
    },
    {
      "name": "idmp-plugin:idmp-shared",
      "advisories": [
        "idmp-shared: reads a secret env var"
      ]
    },
    {
      "name": "idmp-plugin:idmp-workflow-analysis-create",
      "advisories": [
        "idmp-workflow-analysis-create: exfiltration intent"
      ]
    },
    {
      "name": "imessage:access",
      "advisories": [
        "access: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "imessage:configure",
      "advisories": [
        "configure: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "intercom:install-messenger",
      "advisories": [
        "install-messenger: reads a secret env var"
      ]
    },
    {
      "name": "jfrog:jfrog",
      "advisories": [
        "jfrog: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "knowledge-catalog:knowledge-catalog-discovery",
      "advisories": [
        "knowledge-catalog-discovery: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "logfire:logfire-instrumentation",
      "advisories": [
        "logfire-instrumentation: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "logfire:logfire-query",
      "advisories": [
        "logfire-query: reads a secret env var"
      ]
    },
    {
      "name": "looker:looker",
      "advisories": [
        "looker: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "looker:looker-dev",
      "advisories": [
        "looker-dev: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "mapbox:mapbox-android-patterns",
      "advisories": [
        "mapbox-android-patterns: reads a secret env var"
      ]
    },
    {
      "name": "mapbox:mapbox-data-visualization-patterns",
      "advisories": [
        "mapbox-data-visualization-patterns: reads a secret env var"
      ]
    },
    {
      "name": "mapbox:mapbox-flutter-patterns",
      "advisories": [
        "mapbox-flutter-patterns: reads a secret env var"
      ]
    },
    {
      "name": "mapbox:mapbox-maplibre-migration",
      "advisories": [
        "mapbox-maplibre-migration: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "mapbox:mapbox-mcp-runtime-patterns",
      "advisories": [
        "mapbox-mcp-runtime-patterns: reads a secret env var"
      ]
    },
    {
      "name": "mapbox:mapbox-token-security",
      "advisories": [
        "mapbox-token-security: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "mapbox:mapbox-web-integration-patterns",
      "advisories": [
        "mapbox-web-integration-patterns: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "mapbox:mapbox-web-performance-patterns",
      "advisories": [
        "mapbox-web-performance-patterns: exfiltration intent"
      ]
    },
    {
      "name": "mercadopago:mp-review",
      "advisories": [
        "mp-review: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "mercadopago:mp-test-setup",
      "advisories": [
        "mp-test-setup: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "mergify:mergify-ci",
      "advisories": [
        "mergify-ci: reads a secret env var"
      ]
    },
    {
      "name": "mergify:mergify-stack",
      "advisories": [
        "mergify-stack: exfiltration intent"
      ]
    },
    {
      "name": "migration-to-aws:gcp-to-aws",
      "advisories": [
        "gcp-to-aws: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "migration-to-aws:heroku-to-aws",
      "advisories": [
        "heroku-to-aws: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "miro:miro-code-review",
      "advisories": [
        "miro-code-review: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "mongodb:mongodb-schema-design",
      "advisories": [
        "mongodb-schema-design: reads a secret env var"
      ]
    },
    {
      "name": "netlify-skills:netlify-config",
      "advisories": [
        "netlify-config: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "netlify-skills:netlify-database",
      "advisories": [
        "netlify-database: exfiltration intent"
      ]
    },
    {
      "name": "netlify-skills:netlify-deploy",
      "advisories": [
        "netlify-deploy: exfiltration intent"
      ]
    },
    {
      "name": "netlify-skills:netlify-image-cdn",
      "advisories": [
        "netlify-image-cdn: reads a secret env var"
      ]
    },
    {
      "name": "netlify-skills:netlify-mcp-servers",
      "advisories": [
        "netlify-mcp-servers: exfiltration intent"
      ]
    },
    {
      "name": "newrelic:apm",
      "advisories": [
        "apm: exfiltration intent"
      ]
    },
    {
      "name": "nightvision:api-discovery",
      "advisories": [
        "api-discovery: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "nightvision:ci-cd-integration",
      "advisories": [
        "ci-cd-integration: reads a secret env var"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-databricks-migrator:aidp-migrator-bootstrap",
      "advisories": [
        "aidp-migrator-bootstrap: reads a secret env var"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-engineer-agent:aidp-engineer-overview",
      "advisories": [
        "aidp-engineer-overview: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-engineer-agent:aidp-git",
      "advisories": [
        "aidp-git: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-engineer-agent:aidp-spark-optimization",
      "advisories": [
        "aidp-spark-optimization: exfiltration intent"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-engineer-agent:aidp-workspace-files",
      "advisories": [
        "aidp-workspace-files: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-spark-connectors:aidp-aws-s3",
      "advisories": [
        "aidp-aws-s3: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-spark-connectors:aidp-azure-adls",
      "advisories": [
        "aidp-azure-adls: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "oracle-ai-data-platform-workbench-spark-connectors:aidp-connectors-bootstrap",
      "advisories": [
        "aidp-connectors-bootstrap: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "oracledb:oracledb",
      "advisories": [
        "oracledb: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "outputai:output-credentials-env-vars",
      "advisories": [
        "output-credentials-env-vars: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "outputai:output-dev-credentials",
      "advisories": [
        "output-dev-credentials: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "outputai:output-dev-evaluator-function",
      "advisories": [
        "output-dev-evaluator-function: reads a secret env var"
      ]
    },
    {
      "name": "outputai:output-dev-http-client-create",
      "advisories": [
        "output-dev-http-client-create: reads a secret env var"
      ]
    },
    {
      "name": "outputai:output-error-http-client",
      "advisories": [
        "output-error-http-client: reads a secret env var"
      ]
    },
    {
      "name": "outputai:output-eval-error-analysis",
      "advisories": [
        "output-eval-error-analysis: exfiltration intent"
      ]
    },
    {
      "name": "outputai:output-meta-project-context",
      "advisories": [
        "output-meta-project-context: reads a secret env var"
      ]
    },
    {
      "name": "pinecone:assistant",
      "advisories": [
        "assistant: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "pinecone:cli",
      "advisories": [
        "cli: reads a secret env var"
      ]
    },
    {
      "name": "plugin-dev:command-development",
      "advisories": [
        "command-development: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "plugin-dev:hook-development",
      "advisories": [
        "hook-development: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "plugin-dev:mcp-integration",
      "advisories": [
        "mcp-integration: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "plugin-dev:plugin-settings",
      "advisories": [
        "plugin-settings: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "plugin-dev:plugin-structure",
      "advisories": [
        "plugin-structure: reads a secret env var"
      ]
    },
    {
      "name": "posthog:analyzing-expensive-users",
      "advisories": [
        "analyzing-expensive-users: reads a secret env var"
      ]
    },
    {
      "name": "posthog:authoring-scouts",
      "advisories": [
        "authoring-scouts: exfiltration intent"
      ]
    },
    {
      "name": "posthog:creating-online-evaluations",
      "advisories": [
        "creating-online-evaluations: reads a secret env var"
      ]
    },
    {
      "name": "posthog:debugging-signals-pipeline",
      "advisories": [
        "debugging-signals-pipeline: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "posthog:debugging-surveys",
      "advisories": [
        "debugging-surveys: exfiltration intent"
      ]
    },
    {
      "name": "posthog:diagnosing-stacktrace-symbolication",
      "advisories": [
        "diagnosing-stacktrace-symbolication: reads a secret env var"
      ]
    },
    {
      "name": "posthog:exploring-ai-failures",
      "advisories": [
        "exploring-ai-failures: reads a secret env var"
      ]
    },
    {
      "name": "posthog:exploring-llm-clusters",
      "advisories": [
        "exploring-llm-clusters: reads a secret env var"
      ]
    },
    {
      "name": "posthog:exploring-llm-costs",
      "advisories": [
        "exploring-llm-costs: reads a secret env var"
      ]
    },
    {
      "name": "posthog:exploring-llm-traces",
      "advisories": [
        "exploring-llm-traces: reads a secret env var"
      ]
    },
    {
      "name": "posthog:improving-mcp-tools",
      "advisories": [
        "improving-mcp-tools: exfiltration intent"
      ]
    },
    {
      "name": "posthog:instrument-error-tracking",
      "advisories": [
        "instrument-error-tracking: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "posthog:instrument-feature-flags",
      "advisories": [
        "instrument-feature-flags: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "posthog:instrument-integration",
      "advisories": [
        "instrument-integration: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "posthog:instrument-llm-analytics",
      "advisories": [
        "instrument-llm-analytics: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "posthog:instrument-logs",
      "advisories": [
        "instrument-logs: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "posthog:instrument-product-analytics",
      "advisories": [
        "instrument-product-analytics: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "posthog:querying-posthog-data",
      "advisories": [
        "querying-posthog-data: reads a secret env var"
      ]
    },
    {
      "name": "posthog:resolving-ingestion-warnings",
      "advisories": [
        "resolving-ingestion-warnings: reads a secret env var"
      ]
    },
    {
      "name": "posthog:setting-up-support-slack-locally",
      "advisories": [
        "setting-up-support-slack-locally: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "posthog:signals-scout-skills-store",
      "advisories": [
        "signals-scout-skills-store: exfiltration intent"
      ]
    },
    {
      "name": "posthog:skills-store",
      "advisories": [
        "skills-store: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "project-artifact:project-artifact",
      "advisories": [
        "project-artifact: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "qdrant-skills/qdrant:qdrant-monitoring",
      "advisories": [
        "qdrant-monitoring: exfiltration intent"
      ]
    },
    {
      "name": "qdrant-skills/qdrant:qdrant-performance-optimization",
      "advisories": [
        "qdrant-performance-optimization: exfiltration intent"
      ]
    },
    {
      "name": "qodo-skills:qodo-get-rules",
      "advisories": [
        "qodo-get-rules: reads a secret env var"
      ]
    },
    {
      "name": "qodo-skills:qodo-pr-resolver",
      "advisories": [
        "qodo-pr-resolver: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "qt-development-skills:qt-cpp-review",
      "advisories": [
        "qt-cpp-review: exfiltration intent"
      ]
    },
    {
      "name": "qt-development-skills:qt-qml",
      "advisories": [
        "qt-qml: exfiltration intent"
      ]
    },
    {
      "name": "qt-development-skills:qt-qml-review",
      "advisories": [
        "qt-qml-review: exfiltration intent"
      ]
    },
    {
      "name": "railway:use-railway",
      "advisories": [
        "use-railway: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "rc/RevenueCat:integrate-revenuecat",
      "advisories": [
        "integrate-revenuecat: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "rc/RevenueCat:revenuecat-entitlements-gate",
      "advisories": [
        "revenuecat-entitlements-gate: exfiltration intent"
      ]
    },
    {
      "name": "render:render-debug",
      "advisories": [
        "render-debug: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "render:render-docker",
      "advisories": [
        "render-docker: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "render:render-env-vars",
      "advisories": [
        "render-env-vars: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "render:render-migrate-from-heroku",
      "advisories": [
        "render-migrate-from-heroku: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "resend:agent-email-inbox",
      "advisories": [
        "agent-email-inbox: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "resend:resend-cli",
      "advisories": [
        "resend-cli: reads a secret env var"
      ]
    },
    {
      "name": "revenuecat/RevenueCat:integrate-revenuecat",
      "advisories": [
        "integrate-revenuecat: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "revenuecat/RevenueCat:revenuecat-entitlements-gate",
      "advisories": [
        "revenuecat-entitlements-gate: exfiltration intent"
      ]
    },
    {
      "name": "rill:rill-connector",
      "advisories": [
        "rill-connector: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "rill:rill-development",
      "advisories": [
        "rill-development: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "rill:rill-model",
      "advisories": [
        "rill-model: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "rill:rill-rillyaml",
      "advisories": [
        "rill-rillyaml: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "runway-api:rw-check-compatibility",
      "advisories": [
        "rw-check-compatibility: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "runway-api:rw-check-org-details",
      "advisories": [
        "rw-check-org-details: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "runway-api:rw-generate-image",
      "advisories": [
        "rw-generate-image: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "runway-api:rw-generate-video",
      "advisories": [
        "rw-generate-video: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "runway-api:rw-integrate-characters",
      "advisories": [
        "rw-integrate-characters: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "runway-api:rw-recipe-full-setup",
      "advisories": [
        "rw-recipe-full-setup: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "runway-api:rw-setup-api-key",
      "advisories": [
        "rw-setup-api-key: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "runway-api:use-runway-api",
      "advisories": [
        "use-runway-api: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sagemaker-ai:hyperpod-performance-debugger",
      "advisories": [
        "hyperpod-performance-debugger: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sagemaker-ai:hyperpod-version-checker",
      "advisories": [
        "hyperpod-version-checker: reads a secret env var"
      ]
    },
    {
      "name": "sagemaker-ai:model-deployment",
      "advisories": [
        "model-deployment: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sanity:sanity-best-practices",
      "advisories": [
        "sanity-best-practices: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "sanity:sanity-migration",
      "advisories": [
        "sanity-migration: reads a secret env var"
      ]
    },
    {
      "name": "save-to-spotify:save-to-spotify",
      "advisories": [
        "save-to-spotify: reads a secret env var"
      ]
    },
    {
      "name": "sentry:sentry-get-started",
      "advisories": [
        "sentry-get-started: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sentry:sentry-instrument",
      "advisories": [
        "sentry-instrument: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "sentry:sentry-otel-exporter-setup",
      "advisories": [
        "sentry-otel-exporter-setup: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sentry:sentry-setup-ai-monitoring",
      "advisories": [
        "sentry-setup-ai-monitoring: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sentry:sentry-snapshots-cocoa",
      "advisories": [
        "sentry-snapshots-cocoa: reads a secret env var"
      ]
    },
    {
      "name": "sentry-cli:sentry-cli",
      "advisories": [
        "sentry-cli: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "session-report:session-report",
      "advisories": [
        "session-report: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-admin",
      "advisories": [
        "shopify-admin: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-app-store-review",
      "advisories": [
        "shopify-app-store-review: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-custom-data",
      "advisories": [
        "shopify-custom-data: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-customer",
      "advisories": [
        "shopify-customer: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-dev",
      "advisories": [
        "shopify-dev: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-functions",
      "advisories": [
        "shopify-functions: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-hydrogen",
      "advisories": [
        "shopify-hydrogen: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-liquid",
      "advisories": [
        "shopify-liquid: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-onboarding-dev",
      "advisories": [
        "shopify-onboarding-dev: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-onboarding-merchant",
      "advisories": [
        "shopify-onboarding-merchant: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-partner",
      "advisories": [
        "shopify-partner: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-payments-apps",
      "advisories": [
        "shopify-payments-apps: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-polaris-admin-extensions",
      "advisories": [
        "shopify-polaris-admin-extensions: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-polaris-app-home",
      "advisories": [
        "shopify-polaris-app-home: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-polaris-checkout-extensions",
      "advisories": [
        "shopify-polaris-checkout-extensions: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-polaris-customer-account-extensions",
      "advisories": [
        "shopify-polaris-customer-account-extensions: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-pos-ui",
      "advisories": [
        "shopify-pos-ui: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-storefront-graphql",
      "advisories": [
        "shopify-storefront-graphql: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:shopify-use-shopify-cli",
      "advisories": [
        "shopify-use-shopify-cli: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "shopify-ai-toolkit/shopify-plugin:ucp",
      "advisories": [
        "ucp: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "snowflake-cortex-code:cortex-setup",
      "advisories": [
        "cortex-setup: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sourcegraph:searching-sourcegraph",
      "advisories": [
        "searching-sourcegraph: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "spanner:spanner-data",
      "advisories": [
        "spanner-data: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "spotify-ads-api:ads",
      "advisories": [
        "ads: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:api-reference",
      "advisories": [
        "api-reference: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:assets",
      "advisories": [
        "assets: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:build-campaign",
      "advisories": [
        "build-campaign: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:bulk",
      "advisories": [
        "bulk: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:campaign-strategy",
      "advisories": [
        "campaign-strategy: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:campaigns",
      "advisories": [
        "campaigns: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:clone",
      "advisories": [
        "clone: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:configure",
      "advisories": [
        "configure: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:dashboard",
      "advisories": [
        "dashboard: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:drafts",
      "advisories": [
        "drafts: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:export",
      "advisories": [
        "export: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:monitor",
      "advisories": [
        "monitor: reads a secret env var"
      ]
    },
    {
      "name": "spotify-ads-api:report",
      "advisories": [
        "report: reads a secret env var"
      ]
    },
    {
      "name": "stripe:stripe-projects",
      "advisories": [
        "stripe-projects: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "sumup:sumup",
      "advisories": [
        "sumup: reads a secret env var"
      ]
    },
    {
      "name": "sumup:sumup-testing",
      "advisories": [
        "sumup-testing: reads a secret env var"
      ]
    },
    {
      "name": "superpowers:brainstorming",
      "advisories": [
        "brainstorming: reads a secret env var"
      ]
    },
    {
      "name": "superpowers:systematic-debugging",
      "advisories": [
        "systematic-debugging: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "superpowers:writing-skills",
      "advisories": [
        "writing-skills: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "teamcity-cli:teamcity-cli",
      "advisories": [
        "teamcity-cli: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "telegram:access",
      "advisories": [
        "access: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "telegram:configure",
      "advisories": [
        "configure: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "togetherai-skills:together-audio",
      "advisories": [
        "together-audio: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-batch-inference",
      "advisories": [
        "together-batch-inference: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-chat-completions",
      "advisories": [
        "together-chat-completions: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-dedicated-containers",
      "advisories": [
        "together-dedicated-containers: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-dedicated-endpoints",
      "advisories": [
        "together-dedicated-endpoints: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-embeddings",
      "advisories": [
        "together-embeddings: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-evaluations",
      "advisories": [
        "together-evaluations: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-fine-tuning",
      "advisories": [
        "together-fine-tuning: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-gpu-clusters",
      "advisories": [
        "together-gpu-clusters: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-images",
      "advisories": [
        "together-images: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-sandboxes",
      "advisories": [
        "together-sandboxes: reads a secret env var"
      ]
    },
    {
      "name": "togetherai-skills:together-video",
      "advisories": [
        "together-video: reads a secret env var"
      ]
    },
    {
      "name": "ui5-modernization:fix-csp-compliance",
      "advisories": [
        "fix-csp-compliance: reads a secret env var"
      ]
    },
    {
      "name": "ui5-modernization:modernize-test-starter",
      "advisories": [
        "modernize-test-starter: exfiltration intent; reads a secret env var"
      ]
    },
    {
      "name": "unreal-engine-skills-for-claude-code:unreal-skill",
      "advisories": [
        "unreal-skill: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:ai-gateway",
      "advisories": [
        "ai-gateway: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "vercel:ai-sdk",
      "advisories": [
        "ai-sdk: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:auth",
      "advisories": [
        "auth: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:bootstrap",
      "advisories": [
        "bootstrap: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "vercel:chat-sdk",
      "advisories": [
        "chat-sdk: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:deployments-cicd",
      "advisories": [
        "deployments-cicd: reads a secret env var"
      ]
    },
    {
      "name": "vercel:env-vars",
      "advisories": [
        "env-vars: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "vercel:marketplace",
      "advisories": [
        "marketplace: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:microfrontends",
      "advisories": [
        "microfrontends: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "vercel:next-forge",
      "advisories": [
        "next-forge: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:nextjs",
      "advisories": [
        "nextjs: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "vercel:shadcn",
      "advisories": [
        "shadcn: reads a secret env var"
      ]
    },
    {
      "name": "vercel:vercel-cli",
      "advisories": [
        "vercel-cli: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:vercel-connect",
      "advisories": [
        "vercel-connect: reads a secret env var"
      ]
    },
    {
      "name": "vercel:vercel-firewall",
      "advisories": [
        "vercel-firewall: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:vercel-functions",
      "advisories": [
        "vercel-functions: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:vercel-storage",
      "advisories": [
        "vercel-storage: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:verification",
      "advisories": [
        "verification: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vercel:workflow",
      "advisories": [
        "workflow: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "vsql-extension-builder:vsql-extension-builder",
      "advisories": [
        "vsql-extension-builder: exfiltration intent"
      ]
    },
    {
      "name": "wix:wix-app",
      "advisories": [
        "wix-app: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "wix:wix-headless",
      "advisories": [
        "wix-headless: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "wix:wix-vibe-headless",
      "advisories": [
        "wix-vibe-headless: reads a secret env var"
      ]
    },
    {
      "name": "workos:workos",
      "advisories": [
        "workos: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "workos:workos-widgets",
      "advisories": [
        "workos-widgets: reads a secret env var"
      ]
    },
    {
      "name": "zapier:zapier-onboard",
      "advisories": [
        "zapier-onboard: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "zilliz:ask-zilliz",
      "advisories": [
        "ask-zilliz: reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:cobrowse-sdk",
      "advisories": [
        "cobrowse-sdk: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:contact-center",
      "advisories": [
        "contact-center: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "zoom-plugin:general",
      "advisories": [
        "general: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:meeting-sdk",
      "advisories": [
        "meeting-sdk: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:oauth",
      "advisories": [
        "oauth: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:phone",
      "advisories": [
        "phone: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:probe-sdk",
      "advisories": [
        "probe-sdk: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "zoom-plugin:rest-api",
      "advisories": [
        "rest-api: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:rivet-sdk",
      "advisories": [
        "rivet-sdk: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "zoom-plugin:rtms",
      "advisories": [
        "rtms: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:scribe",
      "advisories": [
        "scribe: reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:summarizer",
      "advisories": [
        "summarizer: reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:team-chat",
      "advisories": [
        "team-chat: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:translator",
      "advisories": [
        "translator: reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:ui-toolkit",
      "advisories": [
        "ui-toolkit: references a sensitive path (.ssh/.env/credentials/…)"
      ]
    },
    {
      "name": "zoom-plugin:video-sdk",
      "advisories": [
        "video-sdk: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:webhooks",
      "advisories": [
        "webhooks: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:websockets",
      "advisories": [
        "websockets: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:zoom-apps-sdk",
      "advisories": [
        "zoom-apps-sdk: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zoom-plugin:zoom-mcp",
      "advisories": [
        "zoom-mcp: reads a secret env var"
      ]
    },
    {
      "name": "langfuse:langfuse",
      "advisories": [
        "langfuse: exfiltration intent; references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    },
    {
      "name": "zyte-web-data:scrape-review-schema",
      "advisories": [
        "scrape-review-schema: reads a secret env var"
      ]
    },
    {
      "name": "zyte-web-data:scrape-scrapy-cloud",
      "advisories": [
        "scrape-scrapy-cloud: reads a secret env var"
      ]
    },
    {
      "name": "zyte-web-data:scrape-zyte-login",
      "advisories": [
        "scrape-zyte-login: references a sensitive path (.ssh/.env/credentials/…); reads a secret env var"
      ]
    }
  ],
  "pinDriftDetail": [],
  "fetchErrorDetail": []
}