v0.2.43 v2.11.0

high risk

0xNyk/council-of-high-intelligenceAug 27, 2026 → Aug 28, 20261 day between releases

What's New

Adds npm supply-chain coverage and lifecycle hook analysis while fixing MP3/P6 false positives

Breaking Changes

  • `SKILLSPECTOR_TEMPERATURE` now accepts values from 0 through 1 and `SKILLSPECTOR_SEED` accepts integers.

New Features

  • Parse npm lockfile versions 1, 2, and 3
  • Analyze bundled hook execution surfaces
  • Add optional LLM sampling controls
  • Secure file traversal with `O_PATH` support

Improvements

  • Resolve exact npm versions from lockfiles
  • Improve provider guidance and fallback routing
  • Remove MP3 and P6 false positives

Bug Fixes

  • Remove MP3 and P6 false positives
  • Secure file traversal in restricted Linux environments

Upgrade Notes

This is a major version jump introducing security-focused features. Be aware of new environment variables `SKILLSPECTOR_TEMPERATURE` and `SKILLSPECTOR_SEED` with specific type constraints. The scope has shifted from UI fixes to supply-chain analysis.

The Two Releases

v0.2.43

Open Recorder v0.2.43

Aug 27, 2026· 2 months ago

Fixes HUD visibility issues during recording and in the editor, while adding new background wallpapers and gradients.

Full release notes
v2.11.0

SkillSpector v2.11.0

Aug 28, 2026· 2 months ago

Expands supply-chain coverage to installed npm versions and adds bounded analysis of bundled lifecycle hooks, project permissions, and optional LLM sampling controls.

Full release notes