Skip to content

feat: add SKILL-SEC-006 for TLS verification disabling - #32

Merged
royalpinto007 merged 2 commits into
AgentPostmortem:mainfrom
sharadvc:cursor/skill-sec-006-tls-9fe2
Sep 12, 2026
Merged

feat: add SKILL-SEC-006 for TLS verification disabling#32
royalpinto007 merged 2 commits into
AgentPostmortem:mainfrom
sharadvc:cursor/skill-sec-006-tls-9fe2

Conversation

@sharadvc

Copy link
Copy Markdown
Contributor

Summary

Adds SKILL-SEC-006 (high) to flag TLS verification bypasses: NODE_TLS_REJECT_UNAUTHORIZED=0, curl -k/--insecure, wget --no-check-certificate, verify=False, ssl._create_unverified_context, rejectUnauthorized: false.

Test plan

  • npm test — covers the indicators above

Fixes #21

Flag NODE_TLS_REJECT_UNAUTHORIZED=0, curl -k/--insecure,
wget --no-check-certificate, verify=False,
ssl._create_unverified_context, and rejectUnauthorized: false.

Fixes AgentPostmortem#21

Co-authored-by: Sharad. <sharadvc@users.noreply.github.com>
@royalpinto007
royalpinto007 merged commit e7a72e3 into AgentPostmortem:main Sep 12, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

New rule SKILL-SEC-006: flag TLS-verification disabling

3 participants