AINewsnow

My harmless Claude Code skill got DO_NOT_INSTALL from a security scanner. A hidden curl | sh got CAUTION.

I wrote a small Claude Code skill: a SKILL.md plus a Node script that lints freelance cover letters (AI-sounding phrases, made-up claims). When I submitted it to a public skills catalog, the catalog's CI ran NVIDIA's SkillSpector on it in static mode ( --no-llm ), and the check went red: score 64 H…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-10 10:10 · DEV Community — AI
    My harmless Claude Code skill got DO_NOT_INSTALL from a security scanner. A hidden curl | sh got CAUTION.

More stories

  1. Anthropic to Begin Formal IPO Marketing After Filing Misstep — Wall Street Journal Technology
  2. AI Daily Digest November 8, 2026: OpenAI Taps Hacktron for Bug Hunts, Muse Wonder for Everyone, Rubin Inference Gains — DEV Community — AI
  3. Anthropic launches Claude Fable 5.2 and Mythos 5.2 with coding gains and 20% price cut — Anthropic (X)
  4. Meta launches Muse Ember, a low-cost AI model aimed at high-volume agent work — TechCrunch AI
  5. Watch Anthropic to Formally Market IPO After Filing Misstep — Bloomberg AI
  6. Jensen Huang pulls out of ElevenLabs Summit amid Nvidia controversy — TechCrunch AI
  7. IBM and Cisco to integrate Anthropic's Claude Mythos into security platforms — Mixture of Experts (IBM)
  8. Anthropic publishes guide on choosing between Claude models — Anthropic (X)

Get the daily brief of stories like this at 6:30 every morning →