v2.5.3

NVIDIA/SkillSpectorv2.5.3Aug 5, 2026by github-actions[bot]

AI Summary

This patch release improves static-analysis accuracy and consistency by reducing false positives for JavaScript and TypeScript regular expressions while sharing Python AST parsing across analyzer steps.

Key Highlights

Avoid false positives from JavaScript and TypeScript `RegExp.exec` calls in output-handling analysis.
Reuse parsed Python ASTs across analyzer steps for more consistent environment-read detection.
Enhanced static-analysis accuracy for Python and JS/TS patterns.

New Features

Shared Python AST parsing infrastructure for analyzer steps that inspect the same source file.

Full Release Notes

# SkillSpector v2.5.3

Released: 2026-08-04

## Summary

This patch release improves static-analysis accuracy and consistency. It reduces false positives for JavaScript and TypeScript regular-expression execution patterns and shares Python AST parsing across related analyzer steps.

## Highlights

- Avoid false positives from JavaScript and TypeScript `RegExp.exec` calls in output-handling analysis.
- Reuse parsed Python ASTs across analyzer steps for more consistent environment-read detection.

## Added

- Shared Python AST parsing infrastructure for analyzer steps that inspect the same source file.

## Changed

- Environment-read detection and related static analysis now reuse parsed Python source information where available.

## Fixed

- Do not classify JavaScript and TypeScript regular-expression `exec` calls as unsafe output handling.

## Security

- None.

## Breaking Changes and Migration

- None.

## Deprecations

- None.

## Validation

- `git diff --check c4eaaa467f192e46258aa615dc5447e3647e7fa6...HEAD` — passed for each imported PR.
- CI validation for imported GitHub PRs [#341](https://github.com/NVIDIA/SkillSpector/pull/341) and [#332](https://github.com/NVIDIA/SkillSpector/pull/332) — passed.

## Known Limitations

- None.

## References

- [GitHub PR #341](https://github.com/NVIDIA/SkillSpector/pull/341)
- [GitHub PR #332](https://github.com/NVIDIA/SkillSpector/pull/332)
- `CHANGELOG.md`