solongate

Issues somebody may already be working on are listed last. List everything by date

• shared: DLP base64 scanning caps at 60 tokens, misses URL-safe encoding, and is untested for custom patterns

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  solongate/agent-security#156 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• panels: runHiding's row-hiding mechanism is wired to nothing

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue

  Difficulty 4/5 1-2 days Newbie friendliness 52/100

  solongate/agent-security#155 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• panels: modeStyle has no redact color and network/anomaly placeholders render a bare comma

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 74/100

  solongate/agent-security#154 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• panels: sandbox network toggle leaves a pending delete armed across keypresses

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 67/100

  solongate/agent-security#153 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• panels: Settings panel blanks entirely on one failed loader and applies stale async results after remount

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  solongate/agent-security#152 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• panels: rule match editor collapses Allowed/Denied lists and ignores RootDirectory when flagging blanket rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 58/100

  solongate/agent-security#151 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui/live: millisecond dedup can drop events and the notified-ID map grows without bound

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 4/5 3-5 days Newbie friendliness 54/100

  solongate/agent-security#149 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui/live: help screen advertises an 's' session-picker key with no handler

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  solongate/agent-security#148 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui/live: macOS desktop notification escapes quotes but not backslashes before AppleScript

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 79/100

  solongate/agent-security#147 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui/audit: list and detail views render attacker-controlled log fields with no escape stripping

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 3/5 Half a day Newbie friendliness 66/100

  solongate/agent-security#146 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui/audit: delete-all and export-all silently ignore the active filter and a 1000-row cap

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 57/100

  solongate/agent-security#145 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui: local audit log rewrite races with the guard's lock-free append

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  solongate/agent-security#144 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tui: setup wizard discards completion on q/ctrl+c and only shows a Unix install command

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#143 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• app: the human-only dispatch gate has no tests and cliInfoArgs is dead code

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 62/100

  solongate/agent-security#142 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• app: SOLONGATE_INTERNAL=1 disables the human-only security gate

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 55/100

  solongate/agent-security#141 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/observability: readTraceRing silently drops every record after an oversized line

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#140 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/observability: audit whitelist/block does not validate --scope or the subcommand name

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#139 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/maintenance: update's GitHub host check, tag checkout, and dirty-tree guard all fail open

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  solongate/agent-security#138 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/policy: allow/deny with no or multiple selector flags silently creates the wrong rule

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 67/100

  solongate/agent-security#137 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/security: dlp add-custom --re is matched as a glob, not a regular expression

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  solongate/agent-security#136 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/security: ratelimit set accepts an invalid mode and non-positive limits

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  solongate/agent-security#135 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cli/policy: Windows build excludes every unit test in the package

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#134 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• confine: RunAgent truncates the command when it contains its own literal --

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  solongate/agent-security#133 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• cliutil: FlagNumOK has no bounds check and DisplayWidth undercounts East Asian wide characters

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  solongate/agent-security#132 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• term: isatty misclassifies /dev/null as a terminal and BannerColors freezes pre-init colors

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 3/5 1-2 days Newbie friendliness 67/100

  solongate/agent-security#131 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• health: several health checks have no test coverage at all

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#130 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• health: guard, credential, and hooks checks silently report the optimistic or stale answer

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  solongate/agent-security#129 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• config: Dir()'s HOME fallback is dead code and the regression test can't catch it

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 3/5 1-2 days Newbie friendliness 69/100

  solongate/agent-security#128 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• config: LocalLogsSetting() hardcodes Enabled:true and ignores the configured value

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 1/5 Under an hour Newbie friendliness 85/100

  solongate/agent-security#127 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• config: LockPath follows symlinks and the immutable probe never self-heals after a crash

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  solongate/agent-security#126 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• install: RemoveClaudeShim creates an empty PowerShell profile on Windows when none existed

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  solongate/agent-security#125 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• install: installing or uninstalling the Claude Code guard destroys unrelated existing hooks

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 3/5 1-2 days Newbie friendliness 67/100

  solongate/agent-security#124 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• install: OpenCode plugin source is trusted from the CWD ancestor tree with no provenance check

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  solongate/agent-security#123 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• client: SecurityInsights per-minute anomaly key mis-splits agent names containing a space

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 73/100

  solongate/agent-security#122 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• client: AddRule/RevokeRule drop unreadable rules and dedup ignores ArgumentConstraints

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  solongate/agent-security#121 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• client: validateSandboxDir never resolves symlinks before the home/root guard

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  solongate/agent-security#120 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• client: readStore trusts an unsigned policy.json unconditionally

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 45/100

  solongate/agent-security#119 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• hooks: go_bin() picks the cached Go toolchain with a lexicographic, not version-aware, sort

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  solongate/agent-security#118 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• policy: rootDirectory confinement uses unanchored prefix matching on uncleaned paths

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  solongate/agent-security#117 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• policy: extract_commands.go misses quoted URLs, newline-separated statements, and the code field

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  solongate/agent-security#116 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• policy: FallbackEvaluate disagrees with the OPA engine on enabled defaults, AND/OR semantics, and rootDirectory

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  solongate/agent-security#115 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• crypto: LoadOrCreateKeyPair overwrites a surviving key and has no lock against concurrent first runs

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  solongate/agent-security#114 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• crypto: VerifyDocument's error and legacy-unsigned handling both let forged policy.json through

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  solongate/agent-security#113 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• sandbox: workspace confinement accepts /, $HOME, and symlink aliases of $HOME

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 68/100

  solongate/agent-security#112 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tamper: self-protection Check() misses unrecognized path fields, pushd, and unslashed install-dir commands

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 66/100

  solongate/agent-security#111 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• auditcmd: rate-limit burst tracking has no locking, letting concurrent calls race and undercount

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#110 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• auditcmd: audit-logs substring match, filenames shape, and pre-scan truncation all let secrets bypass DLP

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  solongate/agent-security#109 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tokens: opencode and codex readers skip the sanitization and dedup every other source gets

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  solongate/agent-security#108 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• tokens: readAntigravity builds a SQLite path from unsanitized conversationID, enabling path traversal

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  solongate/agent-security#107 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• shield: signal-relay goroutine leaks and proxied responses are never flushed

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  solongate/agent-security#106 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day