Adam Moussa ea1845d41d fix(security): fence and neutralize untrusted Slack channel description in agent prompt ... Hardens SLACK-PI-001 (sh-security-review). Slack channel topic/purpose is editable by ordinary channel members and flowed verbatim into the agent LLM prompt behind only a prose 'untrusted' label — an indirect prompt-injection vector for an agent with network egress and repo write. Now strip leading markdown structural tokens per line (so it can't forge the prompt's real request/section delimiters), cap length, and wrap it in a per-render unguessable sentinel fence (so injected text can't spoof a closing marker to escape the data block). Deliberately diverges from upstream #1633.		2026-07-03 16:08:35 -04:00
..
agents_md.py	feat: reviewer enforces AGENTS.md/CLAUDE.md repo rules as mandatory pass (#1569)	2026-06-18 11:13:58 -07:00
analyzer_skills.py	feat: managed LangGraph Cloud + Vercel migration (PR2 — code fixes + docs) (#65)	2026-06-29 19:58:38 -04:00
api_standards_skill.py	feat: apply API standards skill in PR reviews for API changes (#1452)	2026-06-08 14:37:04 -07:00
auth.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
authorship.py	feat: author Slack/dashboard/schedule commits + PRs as the app by default (#57) (#60)	2026-06-29 14:22:33 -04:00
comments.py	chore: Drop monorepo (#1029)	2026-03-06 16:10:34 -08:00
dashboard_handoff.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
dashboard_links.py	feat: plan mode with model-driven entry and collaborative review (#1580)	2026-06-23 12:06:58 -07:00
github_app.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
github_checks.py	feat: shared GitHub HTTP helper with retries, rate-limit handling [closes OPE-45] (#1565)	2026-06-17 14:45:57 -07:00
github_ci.py	feat: shared GitHub HTTP helper with retries, rate-limit handling [closes OPE-45] (#1565)	2026-06-17 14:45:57 -07:00
github_comments.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
github_feedback.py	feat: outcomes dataset + bootstrap/continual split via skills (#1365)	2026-06-01 13:25:12 -07:00
github_http.py	feat: shared GitHub HTTP helper with retries, rate-limit handling [closes OPE-45] (#1565)	2026-06-17 14:45:57 -07:00
github_org_membership.py	feat: author Slack/dashboard/schedule commits + PRs as the app by default (#57) (#60)	2026-06-29 14:22:33 -04:00
github_proxy.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
github_token.py	fix: resolve security-review findings (sandbox isolation, IAM list scope, webhook replay, info-leak) (#54)	2026-06-29 12:21:19 -04:00
http.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
langsmith.py	feat: plan mode with model-driven entry and collaborative review (#1580)	2026-06-23 12:06:58 -07:00
linear.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
linear_team_repo_map.py	chore: Add langsmith deployments data plane linear project (#1044)	2026-03-09 18:36:00 -07:00
model.py	feat: migrate model providers to Bedrock (Claude) + Fireworks (everything else) (#62)	2026-06-29 15:57:19 -04:00
multimodal.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
repo.py	feat: extract repo parsing into shared util, add linear comment repo override (#1103)	2026-03-20 13:34:00 -07:00
repo_prep.py	fix: reviewer can silently review a stale checkout on reused sandboxes (#1503)	2026-06-11 13:42:10 -07:00
reviewer_outcomes.py	feat: outcomes dataset + bootstrap/continual split via skills (#1365)	2026-06-01 13:25:12 -07:00
sandbox.py	feat: repo-scoped dynamic sandbox snapshots (#1595)	2026-06-23 12:24:11 -07:00
sandbox_paths.py	fix: better custom backend support (#1071)	2026-03-17 11:55:36 -07:00
sandbox_state.py	fix: resolve security-review findings (sandbox isolation, IAM list scope, webhook replay, info-leak) (#54)	2026-06-29 12:21:19 -04:00
slack.py	fix(security): fence and neutralize untrusted Slack channel description in agent prompt	2026-07-03 16:08:35 -04:00
slack_feedback.py	feat: outcomes dataset + bootstrap/continual split via skills (#1365)	2026-06-01 13:25:12 -07:00
thread_ids.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
thread_ops.py	refactor: adopt modular webhook architecture (#1621) + port fork customizations (#85)	2026-06-30 18:46:46 -04:00
tracing.py	feat: route graphs to separate LangSmith tracing projects (#1508)	2026-06-11 17:57:16 -07:00
url_safety.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00