All pull requests

Pull requests

• fix(security-discovery): fan batches out through the shared LLM limiter

  #856·elliottwaves-20 opened Oct 17, 2026Contributor·

  ·
  1

• fix(llm): keep CLI prompts under MAX_INPUT_BYTES when batching large files

  #855·elliottwaves-20 opened Oct 17, 2026Contributor·

  ·
  1

• release: prepare 2.13.1 parser-completeness patch

  #852·mohgupta-ship-it opened Oct 17, 2026Member·

  ·

• fix(report): preserve each compacted occurrence's finding text

  #851·bharathvemula opened Oct 17, 2026·

  ·
  1

• fix(analyzer): keep PowerShell host syntax from inventing shell parse limits

  #848·Flotrpy opened Oct 16, 2026·

  ·
  1

• feat(cli): configure the recursive skill count limit

  #847·agentsope opened Oct 16, 2026Contributor·

  ·
  1

  4

• Tighten AS3, EA1 and EA3 false-positive handling

  #846·sholmes222 opened Oct 15, 2026·

  ·

• fix(llm): retry structured calls that return no result

  #845·Thanatos9404 opened Oct 15, 2026·

  ·
  1

  1

• Keep E1 upload flags within proved command boundaries

  #841·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  1

  

• Reject unsupported skill options in registry mode

  #840·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  1

  

• fix(mp3): recognize descriptive hardware reset states

  #837·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  1

  

• fix(report): align recursive risk recommendations

  #836·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  1

  

• fix(pe3): treat ignore-list code fences in Markdown as ignore-file entries

  #831·jwcastillo opened Oct 14, 2026Contributor·

  ·
  1

  2

• fix(analyzer): preserve inline JSON and nested list ownership

  #829·zozozeezee opened Oct 14, 2026Collaborator·

  ·
  5

• fix(analyzer): trace credentials nested in urllib request headers

  #826·efegokdemir opened Oct 14, 2026Contributor·

  ·
  1

• fix: preserve Pi workspace aliases and strengthen security regressions

  #825·yashrajp22 opened Oct 14, 2026Collaborator·

  ·

• fix(cli): reject shipped baselines in recursive multi-skill scans

  #823·chrisknvidia opened Oct 13, 2026Collaborator·

  ·
  1

  1

• fix(tm1): use the final repeated assignment target

  #820·chrisknvidia opened Oct 12, 2026Collaborator·

  ·
  1

• fix(p2): bound Markdown reference-comment findings

  #819·chrisknvidia opened Oct 12, 2026Collaborator·

  ·
  1

• Harden LLM prompts against scanned-skill steering; build the image from uv.lock as non-root

  #817·oherbawi opened Oct 11, 2026·

  ·
  8

• fix(p6): avoid target-word matches inside longer identifiers

  #815·chrisknvidia opened Oct 10, 2026Collaborator·

  ·
  13

• fix(analyzer): keep checking command lines inside a word that spans lines

  #814·elliottwaves-20 opened Oct 9, 2026Contributor·

  ·
  1

  4

• fix: distinguish urllib parsing from network access

  #812·sholmes222 opened Oct 9, 2026·

  ·
  3

• feat(report): annotate static findings with structured source roles

  #811·optimization2026 opened Oct 8, 2026·

  ·
  1

• fix(report): keep missing references as non-blocking caveats

  #805·efegokdemir opened Oct 8, 2026Contributor·4 tasks done·

  ·
  1

  3