Skip to content

fix(scientific-documentation): replace unclaimed pip placeholder with angle-bracket syntax - #116

Closed
xsuryanshx wants to merge 1 commit into
uw-ssec:mainfrom
xsuryanshx:fix/security-placeholder-package-name
Closed

xsuryanshx wants to merge 1 commit into
uw-ssec:mainfrom
xsuryanshx:fix/security-placeholder-package-name

Conversation

@xsuryanshx

Copy link
Copy Markdown

Summary

  • Replaces sphinx-extension-name placeholder in common-issues.md with <extension-name> (angle-bracket syntax) at all 3 occurrences
  • Angle-bracket syntax is rejected by pip as invalid, making it unambiguous this is a template placeholder — not a real installable package
  • Adds concrete examples (e.g. sphinx-rtd-theme, myst-parser, nbsphinx) to help users understand what to substitute

Closes #114

Test plan

  • Verify no remaining occurrences of sphinx-extension-name in the repo
  • Confirm the updated examples are clear and instructive

🤖 Generated with Claude Code

… angle-bracket syntax

Replaces `sphinx-extension-name` placeholder in common-issues.md with
`<extension-name>` to prevent potential dependency confusion attacks.
Angle-bracket syntax is rejected by pip as invalid, making it
unambiguous that it is a template placeholder and not a real package.

Closes uw-ssec#114

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@lsetiawan

Copy link
Copy Markdown
Member

Thanks for your contribution, I've integrated this to #118 with other additional fixes across the board.

@lsetiawan lsetiawan closed this Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security issue in scientific-documentation skill

2 participants