v2.10.0 v2.11.0
airweave-ai/airweaveAug 26, 2026 → Aug 28, 20261 day between releases
What's New
Adds npm lockfile parsing, bundled lifecycle hook analysis, and LLM sampling controls
New Features
- Parse npm lockfiles to resolve exact direct and transitive dependency versions
- Analyze bundled lifecycle hooks and project permission grants for BH1-BH3 findings
- Introduce SKILLSPECTOR_TEMPERATURE and SKILLSPECTOR_SEED controls for LLM sampling
- Improve secure file traversal in restricted Linux environments using O_PATH
Improvements
- Reduces MP3 and P6 false positives for nominal state-coverage
- Improves provider guidance and fallback routing
- Improves secure file traversal in restricted Linux environments
Bug Fixes
- Reduces MP3 and P6 false positives for nominal state-coverage
Upgrade Notes
New environment variables SKILLSPECTOR_TEMPERATURE and SKILLSPECTOR_SEED are available for LLM sampling. The analyzer now inspects hooks/hooks.json and .claude/settings.json files for bundled execution risks.
The Two Releases
SkillSpector v2.10.0
Aug 26, 2026· 2 months ago
SkillSpector 2.10.0 enhances security coverage for concealed artifacts, external model selection, and structured skill bundles, while adding localized LLM finding text and exposing the highest reported issue severity.
Full release notesSkillSpector v2.11.0
Aug 28, 2026· 2 months ago
SkillSpector 2.11.0 expands supply-chain coverage to exact npm dependency versions from lockfiles, introduces optional LLM sampling controls, and improves security for file traversal in restricted Linux environments.
Full release notes