📦 deps(thirdparty): update snapshots

This commit is contained in:
ci[bot]
2026-07-10 16:04:20 +00:00
parent 2bb0dc8c1d
commit 92c0c3f687
594 changed files with 55224 additions and 19038 deletions
@@ -1,6 +1,6 @@
{
"name": "agentic-bundle-aas-security-engineer",
"version": "14.0.0",
"version": "14.1.0",
"description": "Editorial \"AAS Security Engineer\" bundle for Claude Code from Agentic Awesome Skills.",
"author": {
"name": "sickn33 and contributors",
@@ -1,6 +1,6 @@
{
"name": "aasb-aas-security-engineer",
"version": "14.0.0",
"version": "14.1.0",
"description": "Install the \"AAS Security Engineer\" workflow plugin from Agentic Awesome Skills.",
"author": {
"name": "sickn33 and contributors",
@@ -204,7 +204,7 @@ Is it actively exploited (EPSS >0.5)?
| Pattern | Risk | Look For |
|---------|------|----------|
| **String concat in queries** | Injection | `"SELECT * FROM " + user_input` |
| **Dynamic code execution** | RCE | `eval()`, `exec()`, `Function()` |
| **Dynamic code execution** | RCE | `eval()`, `exec()`, `Function()` | <!-- security-allowlist: defensive vulnerability taxonomy -->
| **Unsafe deserialization** | RCE | `pickle.loads()`, `unserialize()` |
| **Path manipulation** | Traversal | User input in file paths |
| **Disabled security** | Various | `verify=False`, `--insecure` |