Rules / Reserved for later releases

sec-skill-typosquat

Skill name is one or two edits from a well-known skill or vendor.

warning Hidden content and security Not active yet

All rules73

Not active in this release

The id sec-skill-typosquat is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.

What it will catch: Skill name is one or two edits from a well-known skill or vendor.

The rules index lists what runs today. Progress on new rules is in the repository.