Owner
Agent-Threat-Rule
1 indexed repository · View on GitHub
-
agent-threat-rules
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injecti...
TypeScript · 407 stars
Issues somebody may already be working on are listed last. List everything by date
-
Discussion: define the AgentEvent fields that rules read, with Open Responses as one example mappingOpen
Difficulty 5/5 Over a week Newbie friendliness 25/100
Agent-Threat-Rule/agent-threat-rules#755 ·
Maintainers usually reply within 1 day
-
new-rule
Difficulty 5/5 Over a week Newbie friendliness 42/100
Agent-Threat-Rule/agent-threat-rules#742 · 2 comments ·
Maintainers usually reply within 1 day
-
Cross-validating MCP tool-poisoning detection: labeled-set exchangeMay be free again @rezearcher claimed this 13 days ago, and no pull request is open. Open
Difficulty 4/5 3-5 days Newbie friendliness 35/100
Agent-Threat-Rule/agent-threat-rules#727 · 5 comments ·
Maintainers usually reply within 1 day
-
SPEC §6.4: the 1.0.0 regex-dialect text contradicts the reference engine and the conformance suiteOpenhigh-impact spec-bug
Difficulty 5/5 Over a week Newbie friendliness 35/100
Agent-Threat-Rule/agent-threat-rules#698 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Agent-Threat-Rule/agent-threat-rules#654 · 2 comments ·
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 57/100
Agent-Threat-Rule/agent-threat-rules#653 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
Agent-Threat-Rule/agent-threat-rules#572 · 1 comment ·
Maintainers usually reply within 1 day
-
ecosystem
Difficulty 1/5 Under an hour Newbie friendliness 35/100
Agent-Threat-Rule/agent-threat-rules#559 · 2 comments ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 35/100
Agent-Threat-Rule/agent-threat-rules#70 ·
Maintainers usually reply within 1 day
-
RFC: schema enhancement — complementary_defenses / known_limitations / references.complementary_ossOpenenhancement schema-change
Difficulty 5/5 Over a week Newbie friendliness 38/100
Agent-Threat-Rule/agent-threat-rules#61 ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
Agent-Threat-Rule/agent-threat-rules#55 · 2 comments ·
Maintainers usually reply within 1 day
-
ecosystem good first issue
Difficulty 4/5 3-5 days Newbie friendliness 35/100
Agent-Threat-Rule/agent-threat-rules#3 ·
Maintainers usually reply within 1 day
-
good first issue help wanted
Difficulty 3/5 1-2 days Newbie friendliness 68/100
Agent-Threat-Rule/agent-threat-rules#2 · 1 comment ·
Maintainers usually reply within 1 day
-
SPEC §12 and Conformance Test Suite v1.0.0: no engine could pass the suitePossibly taken A pull request linked to this issue is open or already merged. Openhigh-impact spec-bug
Difficulty 5/5 Over a week Newbie friendliness 25/100
Agent-Threat-Rule/agent-threat-rules#705 · 2 comments ·
Maintainers usually reply within 1 day
-
SPEC §6.3: the operator table and the contains case rule match no enginePossibly taken A pull request linked to this issue is open or already merged. Openspec-bug
Difficulty 5/5 Over a week Newbie friendliness 30/100
Agent-Threat-Rule/agent-threat-rules#703 · 2 comments ·
Maintainers usually reply within 1 day
-
[Probe] Log-substrate prompt injection: verdict manipulation via attacker-controlled log fields (LLM SOC triage)Possibly taken @kalicharanhere claimed this 12 days ago. Openred-team-probe
Difficulty 4/5 3-5 days Newbie friendliness 48/100
Agent-Threat-Rule/agent-threat-rules#695 · 1 comment ·
Maintainers usually reply within 1 day
-
Probe: classic destructive shell value classes (rm -rf variants / dd disk overwrite / fork bomb / chmod 777 recursive / shutdown / shred)Possibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 3/5 1-2 days Newbie friendliness 18/100
Agent-Threat-Rule/agent-threat-rules#658 · 1 comment ·
Maintainers usually reply within 1 day
-
Cross-engine parity: pyatr silently drops rules the TypeScript engine accepts (variable-width lookbehind, \u{...}), plus generate-sigma.py loses case-insensitivityPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
Agent-Threat-Rule/agent-threat-rules#331 · 2 comments ·
Maintainers usually reply within 1 day