Skip to content

fix(skills): update mongodb/agent-skills to be846b4, fix path move#737

Open
JAORMX wants to merge 3 commits into
mainfrom
fix/mongodb-skills-digest
Open

fix(skills): update mongodb/agent-skills to be846b4, fix path move#737
JAORMX wants to merge 3 commits into
mainfrom
fix/mongodb-skills-digest

Conversation

@JAORMX

@JAORMX JAORMX commented Jul 3, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Supersedes chore(deps): update mongodb/agent-skills digest to be846b4 #692. Carries the same digest/version bump renovate proposed for all 7 mongodb skills, plus a path fix for the one that broke.
  • atlas-stream-processing: upstream moved this skill from skills/atlas-stream-processing to skills/mongodb-atlas-stream-processing at the new ref — fixed spec.path to match.
  • Known remaining issue (not fixed here): mongodb-schema-design's skill-security-scan still fails due to a scanner meta-analyzer JSON-parse bug (406 raw findings retained after the false-positive filter crashed) — this is a scanner tooling reliability issue, not a dockyard content problem, and isn't practically fixable by hand-allowlisting hundreds of findings. Tracked separately; will need the scanner tooling fixed or a manual re-run to get lucky on the non-deterministic pass.

Test plan

Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com

renovate Bot and others added 3 commits July 3, 2026 13:32
…connection,mongodb-mcp-setup,mongodb-natural-language-querying,mongodb-query-optimizer,mongodb-schema-design,mongodb-search-and-ai
mongodb/agent-skills moved this skill from skills/atlas-stream-processing
to skills/mongodb-atlas-stream-processing at commit be846b4, breaking
validate-skills and skill-security-scan (checkout failure) in PR #692.

Note: mongodb-schema-design (also bumped in this PR) still fails
skill-security-scan due to a known scanner meta-analyzer JSON-parse bug
unrelated to this content (406 raw findings retained, not practically
allowlistable) -- not fixed here, tracked separately.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@toolhive-release-app

Copy link
Copy Markdown
Contributor

🛡️ Skill Security Scan Results

❌ atlas-stream-processing

  • Status: Failed
  • Findings: 436
  • Blocking: 156

Blocking issues:

  • [ATR_2026_00010] (CRITICAL) Pattern detected: responseFormat — `"conc (SKILL.md:33)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `inc (SKILL.md:38)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: Kafka/ (SKILL.md:39)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: projectId, workspaceName, cloudProvider, region, tier, `inc (SKILL.md:45)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: projectId, workspaceName, connectionName, connectionType, connectionConfig. Leave empty: all workspace and processor fields. (See [references/connection-configs.md](referenc (SKILL.md:46)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: connection | Blocks if referenc (SKILL.md:86)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (SKILL.md:107)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (SKILL.md:121)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: terminal (SKILL.md:124)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $emit target** — Lambda uses `$externalFunc (SKILL.md:125)
  • [ATR_2026_00012] (HIGH) Pattern detected: withvalidationAction: "error"`** — crash (SKILL.md:126)
  • [ATR_2026_00012] (HIGH) Pattern detected: $source (change stream)**: inc (SKILL.md:129)
  • [ATR_2026_00012] (HIGH) Pattern detected: $emit (Kinesis)**: MUST inc (SKILL.md:131)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $https**: must inc (SKILL.md:133)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution (SKILL.md:134)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $validate**: must inc (SKILL.md:135)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $lookup**: inc (SKILL.md:136)
  • [ATR_2026_00012] (HIGH) Pattern detected: avro, not AVRO). See [referenc (SKILL.md:141)
  • [ATR_2026_00004] (CRITICAL) Pattern detected: {role: " (SKILL.md:150)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (SKILL.md:150)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `inc (SKILL.md:152)
  • [ATR_2026_00012] (HIGH) Pattern detected: | As Source ($source) | As Sink ($merge / $emit) | Mid (SKILL.md:172)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Source MUST inc (SKILL.md:175)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (SKILL.md:177)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Can be used mid (SKILL.md:178)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (SKILL.md:179)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (SKILL.md:184)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (SKILL.md:195)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (SKILL.md:196)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (SKILL.md:197)
  • [ATR_2026_00012] (HIGH) Pattern detected: $addFields / $project transforms (validate resh (SKILL.md:207)
  • [ATR_2026_00012] (HIGH) Pattern detected: diagnose-processor` — one-sh (SKILL.md:217)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: terminal (SKILL.md:231)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (SKILL.md:233)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (SKILL.md:235)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (SKILL.md:247)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (SKILL.md:251)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (SKILL.md:252)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (SKILL.md:258)
  • [PG_PII_CREDENTIAL_HARVESTING] (CRITICAL) Pattern detected: Store API authentication credential (SKILL.md:265)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: references/pipeline-patterns.md](referenc (SKILL.md:271)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: references/connection-configs.md](referenc (SKILL.md:272)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: references/development-workflow.md](referenc (SKILL.md:273)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: references/output-diagnostics.md](referenc (SKILL.md:274)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: references/sizing-and-parallelism.md](referenc (SKILL.md:275)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (references/connection-configs.md:3)
  • [ATR_2026_00012] (HIGH) Pattern detected: | As Source ($source) | As Sink ($merge / $emit) | Mid (references/connection-configs.md:9)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Source MUST inc (references/connection-configs.md:12)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/connection-configs.md:14)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Can be used mid (references/connection-configs.md:15)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/connection-configs.md:16)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (references/connection-configs.md:22)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/connection-configs.md:26)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (references/connection-configs.md:27)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/connection-configs.md:28)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/connection-configs.md:62)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/connection-configs.md:67)
  • [ATR_2026_00012] (HIGH) Pattern detected: $https enrichment ONLY — they are NOT valid (references/connection-configs.md:70)
  • [PG_PII_CREDENTIAL_HARVESTING] (CRITICAL) Pattern detected: ask the user for password (references/connection-configs.md:114)
  • [ATR_2026_00004] (CRITICAL) Pattern detected: {role: " (references/connection-configs.md:119)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/connection-configs.md:119)
  • [ATR_2026_00021] (CRITICAL) Pattern detected: password": "my-password (references/connection-configs.md:130)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/connection-configs.md:162)
  • [ATR_2026_00004] (CRITICAL) Pattern detected: {role: " (references/connection-configs.md:170)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/connection-configs.md:170)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: ::1 (references/connection-configs.md:178)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/connection-configs.md:190)
  • [ATR_2026_00012] (HIGH) Pattern detected: $https enrichment stages ONLY. They are NOT valid (references/connection-configs.md:196)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: base64 (references/connection-configs.md:214)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: ::1 (references/connection-configs.md:226)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: ::1 (references/connection-configs.md:238)
  • [PG_PII_CREDENTIAL_HARVESTING] (CRITICAL) Pattern detected: collect sensitive fields (password (references/connection-configs.md:261)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: sample_stream_solar (default, auto-created when `inc (references/connection-configs.md:266)
  • [ATR_2026_00012] (HIGH) Pattern detected: action='get-networking' to find the PrivateLink_id (references/connection-configs.md:296)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/development-workflow.md:14)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/development-workflow.md:15)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `inc (references/development-workflow.md:33)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:48)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:54)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:60)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:79)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `$externalFunc (references/development-workflow.md:86)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:144)
  • [ATR_2026_00098] (CRITICAL) Pattern detected: "amount": 1 (references/development-workflow.md:145)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:149)
  • [ATR_2026_00012] (HIGH) Pattern detected: inspect-processor` — state sh (references/development-workflow.md:163)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:179)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:207)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $https has parallelism setting (inc (references/development-workflow.md:225)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:237)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:250)
  • [ATR_2026_00088] (HIGH) Pattern detected: output (alert) | Probably normal (references/development-workflow.md:253)
  • [ATR_2026_00012] (HIGH) Pattern detected: | OOM / processor crash (references/development-workflow.md:255)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Slow throughput | Low parallelism on I/O stages | Inc (references/development-workflow.md:256)
  • [ATR_2026_00012] (HIGH) Pattern detected: sp.process() in mongosh (references/development-workflow.md:259)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/development-workflow.md:262)
  • [ATR_2026_00088] (HIGH) Pattern detected: stop → restart. Check log (references/development-workflow.md:266)
  • [ATR_2026_00012] (HIGH) Pattern detected: | 401 / 403 on API call | Invalid (references/development-workflow.md:269)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Too many API calls | Wait and retry; avoid (references/development-workflow.md:270)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:272)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: atlas-streams-discoveraction: "inspect-connection" for EACH connection referenc (references/development-workflow.md:278)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/development-workflow.md:280)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $source and ends with $merge, $emit, $https, or $externalFunction (async (references/development-workflow.md:287)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/development-workflow.md:288)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $source inc (references/development-workflow.md:289)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $source with windowed pipeline inc (references/development-workflow.md:290)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution (references/development-workflow.md:294)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/development-workflow.md:297)
  • [ATR_2026_00066] (CRITICAL) Pattern detected: `bash (references/mcp-troubleshooting.md:27)
  • [ATR_2026_00012] (HIGH) Pattern detected: sp.process() in mongosh (references/mcp-troubleshooting.md:38)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/mcp-troubleshooting.md:48)
  • [ATR_2026_00088] (HIGH) Pattern detected: output may be perfectly normal (references/output-diagnostics.md:5)
  • [ATR_2026_00088] (HIGH) Pattern detected: output during normal (references/output-diagnostics.md:20)
  • [ATR_2026_00012] (HIGH) Pattern detected: $match for valid (references/output-diagnostics.md:54)
  • [ATR_2026_00012] (HIGH) Pattern detected: find tool with `sort: {"_id (references/output-diagnostics.md:101)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: mongodb/ (references/pipeline-patterns.md:3)
  • [ATR_2026_00012] (HIGH) Pattern detected: $project | Select/resh (references/pipeline-patterns.md:12)
  • [ATR_2026_00012] (HIGH) Pattern detected: $validate | Schema enforcement (route invalid (references/pipeline-patterns.md:18)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/pipeline-patterns.md:21)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/pipeline-patterns.md:25)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:34)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/pipeline-patterns.md:37)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/pipeline-patterns.md:38)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/pipeline-patterns.md:43)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/pipeline-patterns.md:46)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/pipeline-patterns.md:47)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: shardIdleTimeout (references/pipeline-patterns.md:88)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pipeline-patterns.md:118)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pipeline-patterns.md:180)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/pipeline-patterns.md:182)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/pipeline-patterns.md:185)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: sends processed documents to an external HTTP endpoint (references/pipeline-patterns.md:192)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: webhook (references/pipeline-patterns.md:193)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/pipeline-patterns.md:202)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:207)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "sync" (references/pipeline-patterns.md:213)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/pipeline-patterns.md:288)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution (references/pipeline-patterns.md:298)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: as: Field name to store Lambda response (required for sync, ignored for `async (references/pipeline-patterns.md:299)
  • [ATR_2026_00084] (HIGH) Pattern detected: , ignored for async) (references/pipeline-patterns.md:299)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:303)
  • [ATR_2026_00012] (HIGH) Pattern detected: "dlq" (recommended), "discard", "error" (crash (references/pipeline-patterns.md:319)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: body: JavaScript function as string. args: array of field referenc (references/pipeline-patterns.md:332)
  • [ATR_2026_00012] (HIGH) Pattern detected: {"$type": (references/pipeline-patterns.md:389)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: terminal (references/pipeline-patterns.md:428)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: execution: "async" (references/pipeline-patterns.md:434)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: parallelism: 1. This base level is inc (references/sizing-and-parallelism.md:17)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $merge — conc (references/sizing-and-parallelism.md:22)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $lookup — conc (references/sizing-and-parallelism.md:23)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $https — conc (references/sizing-and-parallelism.md:24)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/sizing-and-parallelism.md:92)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: `$func (references/sizing-and-parallelism.md:102)
  • [ATR_2026_00065] (HIGH) Pattern detected: Data transfer (references/sizing-and-parallelism.md:135)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/sizing-and-parallelism.md:143)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (references/sizing-and-parallelism.md:152)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Maintenanc (references/sizing-and-parallelism.md:176)

✅ mongodb-connection

  • Status: Passed
  • Findings: 2

✅ mongodb-mcp-setup

  • Status: Passed
  • Findings: 3

✅ mongodb-natural-language-querying

  • Status: Passed
  • Findings: 4

✅ mongodb-query-optimizer

  • Status: Passed
  • Findings: 4

❌ mongodb-schema-design

  • Status: Failed
  • Findings: 393
  • Blocking: 118

Blocking issues:

  • [ATR_2026_00012] (HIGH) Pattern detected: insert into (references/fundamental-document-size.md:98)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Embed recent N, referenc (references/fundamental-document-size.md:157)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Updates slow as array grows | Switch to referenc (references/fundamental-document-size.md:158)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:175)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:183)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:192)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:203)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-document-size.md:206)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Relationsh (references/fundamental-embed-vs-reference.md:26)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Publish (references/fundamental-embed-vs-reference.md:31)
  • [ATR_2026_00012] (HIGH) Pattern detected: | 1:many (unbounded) | Separate adds | No | **Referenc (references/fundamental-embed-vs-reference.md:32)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Both directions | Moderate | **Referenc (references/fundamental-embed-vs-reference.md:33)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: settings (references/fundamental-embed-vs-reference.md:65)
  • [ATR_2026_00012] (HIGH) Pattern detected: ; index on { publish (references/fundamental-embed-vs-reference.md:163)
  • [ATR_2026_00012] (HIGH) Pattern detected: _id, title, isbn) in the publish (references/fundamental-embed-vs-reference.md:182)
  • [PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: require choosin (references/fundamental-embed-vs-reference.md:199)
  • [ATR_2026_00140] (HIGH) Pattern detected: the reverse (references/fundamental-embed-vs-reference.md:211)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Many students per class | Referenc (references/fundamental-embed-vs-reference.md:253)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Large/growing both sides | Referenc (references/fundamental-embed-vs-reference.md:255)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Pattern | Parent | Children | Descendants | Anc (references/fundamental-embed-vs-reference.md:337)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Child Refs | Membersh (references/fundamental-embed-vs-reference.md:340)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Array of Anc (references/fundamental-embed-vs-reference.md:341)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/fundamental-embed-vs-reference.md:362)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$cid (references/fundamental-embed-vs-reference.md:394)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$sid (references/fundamental-embed-vs-reference.md:395)
  • [ATR_2026_00012] (HIGH) Pattern detected: email can be omitted entirely. These invalid (references/fundamental-schema-validation.md:14)
  • [ATR_2026_00012] (HIGH) Pattern detected: error | Reject invalid (references/fundamental-schema-validation.md:82)
  • [ATR_2026_00060] (HIGH) Pattern detected: runCommand (references/fundamental-schema-validation.md:89)
  • [ATR_2026_00060] (HIGH) Pattern detected: runCommand (references/fundamental-schema-validation.md:102)
  • [ATR_2026_00085] (HIGH) Pattern detected: Skip validation (references/fundamental-schema-validation.md:111)
  • [ATR_2026_00217] (CRITICAL) Pattern detected: sync timestamp. The application tracks counts in local memory (e.g. a Map key (references/pattern-approximation.md:31)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: lastSyncedAt. When the local counter reaches the threshold, the application issues a single $inc by the threshold amount and updates lastSyncedAt. Unsynced local inc (references/pattern-approximation.md:33)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Conc (references/pattern-approximation.md:37)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Write reduction | ~100x fewer DB writes (at thresh (references/pattern-approximation.md:39)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Staleness | Up to `thresh (references/pattern-approximation.md:40)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Crash safety | Unsynced local inc (references/pattern-approximation.md:42)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/pattern-approximation.md:74)
  • [ATR_2026_00012] (HIGH) Pattern detected: ; query via Federated Database Instanc (references/pattern-archive.md:48)
  • [PG_PII_SSN_HARVESTING] (CRITICAL) Pattern detected: Store age in a sin (references/pattern-archive.md:78)
  • [ATR_2026_00012] (HIGH) Pattern detected: `_id (references/pattern-archive.md:107)
  • [ATR_2026_00012] (HIGH) Pattern detected: $merge-based archival sh (references/pattern-archive.md:110)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/pattern-attribute.md:74)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-bucket.md:12)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: _id enc (references/pattern-bucket.md:20)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-bucket.md:75)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/pattern-bucket.md:97)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pattern-computed.md:79)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pattern-computed.md:80)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$new (references/pattern-computed.md:81)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$NOW (references/pattern-computed.md:82)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Transaction history | Account balanc (references/pattern-computed.md:96)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $merge or $out—the same mechanism shown in Strategy 2 above. The difference is conc (references/pattern-computed.md:133)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: updatePolicy func (references/pattern-document-versioning.md:92)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Reproduce complete historical state | Full snapsh (references/pattern-document-versioning.md:118)
  • [ATR_2026_00051] (HIGH) Pattern detected: Count: -1 (references/pattern-document-versioning.md:137)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $lookup on hot paths by caching selected referenc (references/pattern-extended-reference.md:4)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: customer subdocument with _id (kept as a referenc (references/pattern-extended-reference.md:39)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: updateMany on the embedded reference _id. This can be done synchronously or async (references/pattern-extended-reference.md:43)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Slowly-changing data | Real-time values (balanc (references/pattern-extended-reference.md:51)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Event attendees | Outlier frequenc (references/pattern-outlier.md:120)
  • [ATR_2026_00051] (HIGH) Pattern detected: Count: -1 (references/pattern-outlier.md:138)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: $unionWith, shared indexes must be duplicated, adding new types requires new collections, and application code must branc (references/pattern-polymorphic.md:14)
  • [ATR_2026_00012] (HIGH) Pattern detected: products collection. All documents sh (references/pattern-polymorphic.md:18)
  • [ATR_2026_00060] (HIGH) Pattern detected: runCommand (references/pattern-polymorphic.md:106)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: type value and any type-specific fields. Add partial indexes for type-specific queries as needed, and update schema validation to inc (references/pattern-polymorphic.md:139)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/pattern-polymorphic.md:157)
  • [ATR_2026_00051] (HIGH) Pattern detected: count: -1 (references/pattern-polymorphic.md:160)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (references/pattern-schema-versioning.md:37)
  • [ATR_2026_00051] (HIGH) Pattern detected: for each (references/pattern-schema-versioning.md:167)
  • [ATR_2026_00066] (CRITICAL) Pattern detected: ${doc.profile.firstName} ${doc.profile.lastName} (references/pattern-schema-versioning.md:183)
  • [ATR_2026_00066] (CRITICAL) Pattern detected: ${current.schemaVersion} (references/pattern-schema-versioning.md:192)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: shippingAddress (references/pattern-schema-versioning.md:207)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: $$ROOT (references/pattern-schema-versioning.md:217)
  • [ATR_2026_00012] (HIGH) Pattern detected: $keys (references/pattern-schema-versioning.md:219)
  • [ATR_2026_00051] (HIGH) Pattern detected: count: -1 (references/pattern-schema-versioning.md:220)
  • [ATR_2026_00085] (HIGH) Pattern detected: Skip validation (references/pattern-schema-versioning.md:242)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:4)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:5)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:10)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:28)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:58)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:85)
  • [ATR_2026_00063] (CRITICAL) Pattern detected: compress (references/pattern-time-series-collections.md:140)
  • [ATR_2026_00012] (HIGH) Pattern detected: `system (references/pattern-time-series-collections.md:181)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: find, aggregate, and `distinc (references/source-query-stats.md:5)
  • [ATR_2026_00062] (CRITICAL) Pattern detected: mongodb (references/source-query-stats.md:15)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/source-query-stats.md:18)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:27)
  • [ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:32)
  • [ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:39)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:46)
  • [ATR_2026_00012] (HIGH) Pattern detected: $stageKeyValue (references/source-query-stats.md:47)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:49)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-query-stats.md:52)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:53)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:72)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:74)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:80)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:81)
  • [ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:82)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:83)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-query-stats.md:86)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:87)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:92)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: "admin" (references/source-query-stats.md:99)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:101)
  • [ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:105)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:106)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: cmd (references/source-query-stats.md:107)
  • [ATR_2026_00012] (HIGH) Pattern detected: $key (references/source-query-stats.md:108)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:109)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-query-stats.md:112)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:113)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-query-stats.md:120)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-slow-query-logs.md:5)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Shell (references/source-slow-query-logs.md:38)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (references/source-slow-query-logs.md:49)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (references/source-slow-query-logs.md:59)

✅ mongodb-search-and-ai

  • Status: Passed
  • Findings: 4

Summary: Scanned 7 skill(s), found 274 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants