evandrodevbr
c17192c9fe
Copia local (nao fork, nao submodule) de safedeps, sca-audit, secrets-scan, code-review-security, api-security-review, web-security-review, cve-triage, patch-prioritization, dependency-scanning e hermaguard -- commit exato de origem e licenca de cada uma em skills/NOTICE.md. Elimina o passo de clone externo pro pilar de seguranca do wf-security-review: git clone deste repo ja traz tudo funcional. Corrige tambem o comando de instalacao pro Claude Code nos dois READMEs e no docs/SKILLS.md: Claude Code exige um diretorio por skill (skills/<nome>/SKILL.md), nao aceita os .md soltos que o comando antigo copiava -- confirmado testando a instalacao real.
18 lines
498 B
JSON
18 lines
498 B
JSON
{
|
|
"title": "Unhandled promise rejection",
|
|
"description": "fetch promise has no catch; network failure leaves UI in loading state forever.",
|
|
"severity": "MEDIUM",
|
|
"category": "async",
|
|
"findings": [
|
|
{
|
|
"file": "app.js",
|
|
"trigger": "await fetch chain with no try/catch or .catch",
|
|
"description": "Unhandled rejection \u2014 loading state never resolves on failure",
|
|
"severity": "MEDIUM",
|
|
"classes": [
|
|
"HG-ASYNC",
|
|
"CWE-754"
|
|
]
|
|
}
|
|
]
|
|
} |