v2.11.0 v2.11.1
huggingface/smolagentsAug 28, 2026 → Sep 7, 202610 days between releases
What's New
Raises default aggregate scan deadline to 600 seconds and adds configurable workflow timeout
New Features
- Add SKILLSPECTOR_MAX_WORKFLOW_SECONDS as an optional environment setting for the aggregate workflow deadline.
Improvements
- Increase default aggregate scan deadline from 60 to 600 seconds to prevent timeouts on larger scans.
- Preserve security finding classifications during scan-view and report deduplication.
- Enforce SKILLSPECTOR_MAX_LLM_CONCURRENCY consistently across all analyzers.
Bug Fixes
- Prevent premature workflow termination for scans that legitimately need more than one minute.
- Fix parsing of whitespace-separated allowed-tools declarations to avoid false positives.
Upgrade Notes
Scans may now run up to 600 seconds by default, which is an increase from the previous 60-second limit. You can configure the deadline using the new SKILLSPECTOR_MAX_WORKFLOW_SECONDS environment variable if needed.
The Two Releases
SkillSpector v2.11.0
Aug 28, 2026· 2 months ago
SkillSpector 2.11.0 expands supply-chain coverage to installed npm dependency versions, adds bounded analysis of bundled lifecycle hooks and project permission grants, and introduces optional LLM sampling controls.
Full release notesSkillSpector v2.11.1
Sep 7, 2026· 1 month ago
SkillSpector 2.11.1 raises the default aggregate scan deadline from 60 seconds to 600 seconds and makes it configurable, preventing larger valid scans from timing out under the previous one-minute workflow budget.
Full release notes