All pull requests

Pull requests

• docs: link domain companions directly from SKILL.md

  #121·iqbalmaulana03 opened Oct 29, 2026·

  ·
  1

• Add plugin.json so the repo loads as an Agent Plugin

  #120·srid opened Oct 28, 2026·

  ·

• docs: add Android-specific security audit companion

  #116·sandeep84397 opened Oct 27, 2026·

  ·

• fix: keep validators usable where O_NOFOLLOW is unavailable (Windows)

  #113·PhucNguyen-Dev opened Oct 26, 2026·

  ·

• Enforce the 1,000-field object limit in validate-findings.cjs

  #111·MohitRawat017 opened Oct 25, 2026·

  ·
  1

• Move fix design out of discovery into a separate remediation step

  #109·itinance opened Oct 25, 2026·

  ·

• Treat target content as untrusted data in every agent prompt

  #108·itinance opened Oct 25, 2026·

  ·

• fix: allow artifact sharing within an attempt

  #106·Dinesh-design786 opened Oct 25, 2026·

  ·
  1

• Fix typo in README

  #105·Ted9178 opened Oct 25, 2026·

  ·

• fix: reject a coverage unit that excludes its own ordinary attack-class block

  #104·rudycelekli opened Oct 25, 2026·

  ·

• fix: reject duplicate object keys in coverage-ledger.json

  #103·rudycelekli opened Oct 25, 2026·

  ·

• fix: reject duplicate object keys in findings.json

  #102·rudycelekli opened Oct 25, 2026·

  ·
  3

• Add cryptography and key-management hunting companion guide

  #101·spidervirus opened Oct 24, 2026·

  ·
  1

• fix: support platforms without O_NOFOLLOW/O_NONBLOCK

  #99·SatriaBagusNurhadianto opened Oct 24, 2026·

  ·

• Ground-truth claimed finding paths with --target

  #97·LieBieS opened Oct 23, 2026·1 task done·

  ·

• Harden the audit workflow against target-influenced results

  #96·LieBieS opened Oct 23, 2026·2 tasks done·

  ·

• Derive run paths and prior-run identity from a sanitized repo ID, not the raw repo name

  #95·bodapatisaikrishna opened Oct 23, 2026·

  ·
  1

• Add abort-path cleanup and cross-request stale state classes

  #93·kelmia-stack opened Oct 22, 2026·

  ·

• Add domain-format validators to Business logic class and recon mapping

  #92·Himanshu-Sharma12 opened Oct 22, 2026·2 tasks done·

  ·
  1

  1

• fix: allow checks in one attempt to share a promoted artifact

  #91·Adarsh-mk7 opened Oct 21, 2026·

  ·
  1

• feat: add CWE, CVSS base vector, and references to findings

  #90·zavxai opened Oct 21, 2026·

  ·
  1

• Remediation should name and preserve legitimate uses of the refused path

  #89·sarfaraz1212 opened Oct 21, 2026·

  ·
  1

  2

• fix: allow checks in one attempt to share a promoted artifact

  #87·lab1207 opened Oct 21, 2026·

  ·

• Validate run-metadata.json against the documented run-state contract

  #85·mvanhorn opened Oct 20, 2026·

  ·
  1

• Reject in_progress units at terminal coverage validation

  #84·mvanhorn opened Oct 20, 2026·

  ·
  1