Adam Moussa ea1845d41d fix(security): fence and neutralize untrusted Slack channel description in agent prompt ... Hardens SLACK-PI-001 (sh-security-review). Slack channel topic/purpose is editable by ordinary channel members and flowed verbatim into the agent LLM prompt behind only a prose 'untrusted' label — an indirect prompt-injection vector for an agent with network egress and repo write. Now strip leading markdown structural tokens per line (so it can't forge the prompt's real request/section delimiters), cap length, and wrap it in a per-render unguessable sentinel fence (so injected text can't spoof a closing marker to escape the data block). Deliberately diverges from upstream #1633.		2026-07-03 16:08:35 -04:00
..
dashboard	fix(models): make Claude family fallback recognize Bedrock ids (#119)	2026-07-03 11:51:41 -04:00
integrations	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
middleware	feat: add Slack reaction tool (#1650)	2026-07-03 15:38:56 -04:00
skills	feat: outcomes dataset + bootstrap/continual split via skills (#1365)	2026-06-01 13:25:12 -07:00
tools	feat: add Slack reaction tool (#1650)	2026-07-03 15:38:56 -04:00
utils	fix(security): fence and neutralize untrusted Slack channel description in agent prompt	2026-07-03 16:08:35 -04:00
webhooks	fix(security): fence and neutralize untrusted Slack channel description in agent prompt	2026-07-03 16:08:35 -04:00
analyzer.py	feat: route graphs to separate LangSmith tracing projects (#1508)	2026-06-11 17:57:16 -07:00
chat.py	feat: chat with your PR on the review page (#1534)	2026-06-15 17:17:30 -07:00
ci_autofix.py	refactor: adopt modular webhook architecture (#1621) + port fork customizations (#85)	2026-06-30 18:46:46 -04:00
ci_monitor.py	feat: CI auto-fix and PR babysitting for agent PRs (#1530)	2026-06-15 13:53:50 -07:00
completion.py	fix: surface Slack thread errors (#1627)	2026-07-03 15:50:30 -04:00
dispatch.py	refactor: adopt modular webhook architecture (#1621) + port fork customizations (#85)	2026-06-30 18:46:46 -04:00
encryption.py	feat: support TOKEN_ENCRYPTION_KEY rotation via MultiFernet [closes AB-2323] (#1275)	2026-05-08 14:29:23 -07:00
prompt.py	feat: add Slack reaction tool (#1650)	2026-07-03 15:38:56 -04:00
reconcile.py	refactor: adopt modular webhook architecture (#1621) + port fork customizations (#85)	2026-06-30 18:46:46 -04:00
review_style_collector.py	feat: PR review page (#1495)	2026-06-11 16:11:10 -07:00
review_style_guidance.py	feat: tune reviewer for precision — web/wiki tools + recalibrated prompt (#1312)	2026-05-20 18:35:00 +00:00
reviewer.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
reviewer_diff.py	fix: reviewer reviews full diff; fix review UI scroll + dark-mode composer (#1575)	2026-06-18 19:24:52 -07:00
reviewer_eval_store.py	feat: Run reviewer eval in a GitHub Action; dashboard becomes read-only (#1556)	2026-06-16 19:38:36 -07:00
reviewer_findings.py	fix: Reviews tab — anchored finding card, paginated list, file tree truncation (#1507)	2026-06-11 17:52:20 -07:00
reviewer_groups.py	fix: Simplify review explanation: full-width, plain prose, no diff links (#1547)	2026-06-16 15:32:24 -07:00
reviewer_publish.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
reviewer_reconcile.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
reviewer_trace_context.py	chore: sync upstream/main, defer #1621 modular webhooks (#81)	2026-06-30 16:45:19 -04:00
scheduler.py	refactor: adopt modular webhook architecture (#1621) + port fork customizations (#85)	2026-06-30 18:46:46 -04:00
server.py	feat: add Slack reaction tool (#1650)	2026-07-03 15:38:56 -04:00
webapp.py	fix(security): fence and neutralize untrusted Slack channel description in agent prompt	2026-07-03 16:08:35 -04:00