The ledger
Every verdict the watch has given: what cleared, what waits at the gate and why, and what has not been checked yet. Look a skill up here before you install it.
Cleared skills 45
All of them cleared all 3 watchmen. Notes are findings too small to block; each skill's page lists them.
| Skill | Version | Charter | Admitted | Watch | Notes |
|---|---|---|---|---|---|
| ask-matt | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| code-review | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| codebase-design | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-agent-bricks | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-ai-functions | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-aibi-dashboards | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 2 notes |
| databricks-app-design | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 7 notes |
| databricks-dabs | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-data-discovery | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-dbsql | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-docs | v0.2.21 | Databricks License | 2026-09-25 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-iceberg | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-jobs | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 2 notes |
| databricks-lakeflow-connect | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-metric-views | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-ml-training | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-model-serving | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-pipelines | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 2 notes |
| databricks-serverless-migration | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 3 notes |
| databricks-setup-local | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 2 notes |
| databricks-spark-structured-streaming | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-synthetic-data-gen | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 3 notes |
| databricks-unity-catalog | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-unstructured-pdf-generation | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 3 notes |
| databricks-vector-search | v0.2.31 | Databricks License | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| databricks-zerobus-ingest | v0.2.21 | Databricks License | 2026-09-25 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| domain-modeling | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| grill-me | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| grill-with-docs | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| grilling | v1.2.3 | MIT | 2026-09-25 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 2 notes |
| handoff | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| implement | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| improve-codebase-architecture | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| ponytail | v5.3.2 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | – |
| prototype | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| research | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| resolving-merge-conflicts | v1.2.3 | MIT | 2026-09-25 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| setup-matt-pocock-skills | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| tdd | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| teach | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| to-spec | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| triage | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| wait-what | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| wayfinder | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
| writing-for-agents | v1.3.1 | MIT | 2026-10-18 | SkillSpector 2.9.6: clearedSkill Scanner 2.1.0: clearedAgent Threat Rules 4.0.0: cleared | 1 note |
No skill matches.
At the gate 13 waiting
Skills that were requested but are not in the market. Most met a rule a watchman flags, which often has an innocent reason, such as a guide that explains how to handle access tokens; they come in once a new tag clears the watch. Their findings are published here. Nothing here is a verdict on the skill or its crafter.
The market never copies these. If you want one anyway, tick "Include … at the gate (not cleared)" in the shop: it is then installed straight from its own repository, at the commit that was checked, without the market's review. Every skill and guild page links back to the shop to do this.
databricks/databricks-agent-skills 8

databricks-appsnot cleared
Build apps on Databricks Apps platform. Use when asked to create data apps, analytics tools, or custom interactive visualizations. A plain "create a dashboard" request means a managed AI/BI (Lakeview) dashboard → use databricks-aibi-dashboards, not this skill. Evaluates data access patterns (analytics vs Lakebase synced tables) before scaffolding. Invoke BEFORE starting implementation.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 3 findings, 42 notes
Spector PE3Privilege Escalation: .env3×
references/appkit/agents.md:120 · references/appkit/genie.md:70 · references/appkit/overview.md:62
42 notes that did not block
Spector RP1MCP Rug Pull41×
SKILL.md:59 · SKILL.md:63 · SKILL.md:159 · SKILL.md:160 · SKILL.md:161 · SKILL.md:162 · SKILL.md:163 · references/appkit/agents.md:7 · references/appkit/agents.md:174 · references/appkit/agents.md:194 · references/appkit/agents.md:227 · references/appkit/appkit-sdk.md:19 · references/appkit/custom-endpoints.md:36 · references/appkit/files.md:3 · references/appkit/files.md:97 · references/appkit/files.md:113 · references/appkit/files.md:121 · references/appkit/frontend.md:3 · references/appkit/frontend.md:37 · references/appkit/frontend.md:75 · references/appkit/frontend.md:118 · references/appkit/genie.md:148 · references/appkit/genie.md:152 · references/appkit/genie.md:253 · references/appkit/genie.md:255 · references/appkit/image-generation.md:420 · references/appkit/jobs.md:3 · references/appkit/jobs.md:78 · references/appkit/jobs.md:82 · references/appkit/jobs.md:105 · references/appkit/lakebase.md:82 · references/appkit/metric-views.md:52 · references/appkit/metric-views.md:74 · references/appkit/model-serving.md:209 · references/appkit/overview.md:42 · references/appkit/overview.md:88 · references/appkit/overview.md:117 · references/appkit/overview.md:118 · references/appkit/proto-first.md:262 · references/appkit/sql-queries.md:17 · references/appkit/sql-queries.md:99
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-apps-pythonnot cleared
Python backend for Databricks Apps — FastAPI (default), Flask, Dash, Streamlit, Gradio, Reflex. **Default for a new Databricks App is `databricks-apps` (AppKit — Node/TypeScript/React) — reach for it first.** Use this skill only when the user asks for a Python backend, extends an existing Python app, or the team is Python-only. Covers OAuth auth, app resources, SQL warehouse and Lakebase connectivity, foundation-model / Vector Search / model-serving APIs (via `databricks-python-sdk`), and deployment via CLI or DABs.
SkillSpector: not clearedSkill Scanner: not clearedAgent Threat Rules: clearedWhy it waits: 2 rules, 4 findings, 8 notes
Cisco CORRELATED_SENSITIVE_NETWORK_FLOWSensitive source reaches a network sink1×
Spector PE3Privilege Escalation: access token3×
SKILL.md:67 · examples/llm_config.py:268 · references/1-authorization.md:38
8 notes that did not block
Cisco DATA_EXFIL_NETWORK_REQUESTSOutbound network request primitives that can transmit data externally4×
examples/llm_config.py:220 · examples/llm_config.py:283 · examples/llm_config.py:332 · examples/llm_config.py:341
Spector EA4Excessive Agency: unlimited requests1×
Spector LP3MCP Least Privilege1×
Cisco TOOL_ABUSE_UNDECLARED_NETWORKUndeclared network usage1×
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-corenot cleared
Databricks CLI operations and the parent/entry-point skill for Databricks CLI use: authentication, profile selection, and bundles. Load this first for CLI, auth, profile, and bundle tasks, then load the matching product skill. For finding or exploring data, answering questions about the data, or generating SQL, load the databricks-data-discovery skill (it routes to Genie One). Contains up-to-date guidelines for Databricks-related CLI tasks.
SkillSpector: not clearedSkill Scanner: not clearedAgent Threat Rules: clearedWhy it waits: 3 rules, 3 findings, 9 notes
Cisco COMPOUND_EXTRACT_EXECUTEArchive extraction followed by execution1×
Spector PE3Privilege Escalation: Access Tokens1×
Cisco PIPELINE_TAINT_FLOWDangerous data flow in command pipeline1×
9 notes that did not block
Spector E1Data Exfiltration: https://api.github.com/1×
Spector PE2Privilege Escalation: sudo6×
databricks-cli-install.md:3 · databricks-cli-install.md:11 · databricks-cli-install.md:106 · databricks-cli-install.md:107 · databricks-cli-install.md:207 · databricks-cli-install.md:209
Spector RA2Rogue Agent: create a new profile if needed - Retry the command with `--profile <selected-profile-name>` - **In Claude Code, always use the `--profile` flag** rather than setting environment variables 3. **1×
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-execution-computenot cleared
Execute code and manage compute on Databricks: run Python/Scala/SQL/R via serverless, classic, or interactive clusters, and create/resize/delete clusters and SQL warehouses.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 1 note
Spector TM1Tool Misuse: delete /Workspace/Users/<user>/.ai_dev_kit/train`1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-genie-agentsnot cleared
Create, manage, and query Databricks Genie Agents — curated, per-data natural-language agents (formerly Genie Spaces): build, export/import, migrate across workspaces, and ask questions of a *specific* Agent via the Conversation API. For general data questions or finding data across your workspace, use databricks-data-discovery (Genie One) instead.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 1 note
Spector MP3Memory Poisoning: delete conversation1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-lakebasenot cleared
Databricks Lakebase Postgres: projects, scaling, connectivity, Lakebase synced tables, and Data API. Use when asked about Lakebase databases, OLTP storage, or connecting apps to Postgres on Databricks.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 2 findings, 5 notes
Spector PE3Privilege Escalation: .env2×
references/connectivity.md:84 · references/off-platform.md:197
5 notes that did not block
Spector EA2Excessive Agency: without asking1×
Spector RP1MCP Rug Pull3×
references/off-platform.md:196 · references/off-platform.md:197 · references/off-platform.md:197
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-mlflow-evaluationnot cleared
MLflow 3 GenAI agent evaluation. Use when writing mlflow.genai.evaluate() code, creating @scorer functions, using built-in scorers (Guidelines, Correctness, Safety, RetrievalGroundedness), building eval datasets from traces, setting up trace ingestion and production monitoring, aligning judges with MemAlign from domain expert feedback, or running optimize_prompts() with GEPA for automated prompt improvement.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 2 rules, 2 findings, 1 note
Spector PE3Privilege Escalation: .env1×
Spector YR4YARA Match: Model; Model; MODEL; system prompt; assistant; Ignore previous instructions1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary

databricks-python-sdknot cleared
Databricks development guidance including Python SDK, Databricks Connect, CLI, and REST API. Use when working with databricks-sdk, databricks-connect, or Databricks APIs.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 3 notes
Spector PE3Privilege Escalation: Access Token1×
3 notes that did not block
Spector RA2Rogue Agent: create one - For Spark operations: `uv pip install databricks-connect` - For SDK operations: `uv pip install databricks-sdk` - Databricks CLI version should be 0.278.0 or higher ## Configuration - D1×
Cisco SECRET_PASSWORD_VARHardcoded password or secret in variable1×
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit aea6a1b9bd88 · raw reports: Spector, Cisco, ATR · summary
mattpocock/skills 4

diagnosing-bugsnot cleared
Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 1 note
Spector P6System Prompt Leakage: show instruction1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit 24fe0ef7737e · raw reports: Spector, Cisco, ATR · summary

to-questionnairenot cleared
Turn a decision you can't fully answer into a questionnaire for someone else to fill in.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 1 note
Spector AR1Anti-Refusal: always answer1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit 24fe0ef7737e · raw reports: Spector, Cisco, ATR · summary

to-ticketsnot cleared
Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the configured tracker (edges as text in one file per ticket locally, or native blocking links on a real tracker).
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 1 note
Spector TM2Tool Misuse: First expand: add the new form beside the old so nothing breaks. Then migrate the call sites over in batches sized by blast radius (per package, per directory), each batch its own ticket blocked by th1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit 24fe0ef7737e · raw reports: Spector, Cisco, ATR · summary

wizardnot cleared
Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.
SkillSpector: not clearedSkill Scanner: clearedAgent Threat Rules: clearedWhy it waits: 1 rule, 1 finding, 1 note
Spector PE3Privilege Escalation: .env1×
1 note that did not block
Cisco MANIFEST_MISSING_LICENSESkill does not specify a license1×
Checked 2026-10-18 at commit 24fe0ef7737e · raw reports: Spector, Cisco, ATR · summary
pbakaus/impeccable 1

impeccablenot cleared
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states. Handles UX review, visual hierarchy, information architecture, cognitive load, accessibility, performance, responsive behavior, theming, anti-patterns, typography, fonts, spacing, layout, alignment, color, motion, micro-interactions, UX copy, error states, edge cases, i18n, and reusable design systems or tokens. Also use for bland designs that need to become bolder or more delightful, loud designs that should become quieter, live browser iteration on UI elements, or ambitious visual effects that should feel technically extraordinary. Not for backend-only or non-UI tasks.
SkillSpector: not clearedSkill Scanner: not clearedAgent Threat Rules: clearedWhy it waits: 4 rules, 6 findings, 62 notes
Spector AR2Anti-Refusal: Never judge1×
Spector AS1Agent Snooping: ~/.claude/settings.json2×
Spector MP3Memory Poisoning: new identity is2×
Cisco PROMPT_INJECTION_CONCEALMENTAttempts to conceal actions from the user1×
62 notes that did not block
Cisco DATA_EXFIL_JS_NETWORKOutbound network request primitives in JavaScript/TypeScript20×
scripts/live-browser.js:3825 · scripts/live-browser.js:4141 · scripts/live-browser.js:4161 · scripts/live-browser.js:4205 · scripts/live-browser.js:4254 · scripts/live-browser.js:4273 · scripts/live-browser.js:5341 · scripts/live-browser.js:5814 · scripts/live-browser.js:6310 · scripts/live-browser.js:6442 · scripts/live-browser.js:7168 · scripts/live-browser.js:7290 · scripts/live-browser.js:7815 · scripts/live-browser.js:8460 · scripts/live-browser.js:8487 · scripts/live-browser.js:8748 · scripts/live-browser.js:11577 · scripts/live-browser.js:11589 · scripts/live-browser.js:12767 · scripts/live-browser.js:12768
Spector E1Data Exfiltration: fetch('http://localhost:' + PORT + '/agent-target-result?token=' + TOKEN, { method: 'POST'2×
Spector EA2Excessive Agency: without verification13×
reference/audit.md:137 · reference/audit.native.md:139 · reference/critique.md:690 · reference/degraded/finish-reviewer.md:19 · reference/degraded/finish-reviewer.md:20 · reference/degraded/finish-reviewer.md:20 · reference/degraded/finish-reviewer.md:34 · reference/delight.md:55 · reference/document.md:411 · reference/init.md:112 · reference/new-work.md:55 · reference/visualize.md:31 · reference/visualize.md:37
Spector LP3MCP Least Privilege1×
Spector MP1Memory Poisoning: lasting rule1×
Spector RP1MCP Rug Pull5×
reference/doctor.md:9 · reference/hooks.md:15 · reference/hooks.md:15 · reference/hooks.md:15 · reference/hooks.md:67
Cisco SECRET_PASSWORD_VARHardcoded password or secret in variable7×
scripts/live-browser.js:4142 · scripts/live-browser.js:4162 · scripts/live-browser.js:4206 · scripts/live-browser.js:4255 · scripts/live-browser.js:4274 · scripts/live-browser.js:11577 · scripts/live-browser.js:11589
Spector SSRF2Server-Side Request Forgery: fetch('http://localhost12×
scripts/live-browser.js:3825 · scripts/live-browser.js:4141 · scripts/live-browser.js:4161 · scripts/live-browser.js:4205 · scripts/live-browser.js:4254 · scripts/live-browser.js:4273 · scripts/live-browser.js:7168 · scripts/live-browser.js:7290 · scripts/live-browser.js:7815 · scripts/live-browser.js:8748 · scripts/live-browser.js:11577 · scripts/live-browser.js:11589
Cisco YARA_capability_inflation_genericSKILL DISCOVERY ABUSE detected by YARA1×
Checked 2026-10-18 at commit 8a0e198da34e · raw reports: Spector, Cisco, ATR · summary