Reqskill

Ships an unpinned dependency named 'reqeusts' — one edit away from the well-known 'requests' package (B95 WARN, dependency confusion).

gl0di Updated

File contents

Reqskill (dependency confusion)

Its requirements.txt declares reqeusts>=2.0 — unpinned, and one character-swap away from the popular requests package. A wide version range on a near-duplicate name is the classic dependency-confusion combination.

gl0di/clawseccheck/tree/main/fixtures/bad_b95_dependency_confusion/skills/reqskill commit f64cdc1967

Frequently asked questions

npx skillmds@latest add gl0di/reqskill-2