OpenHands / OpenHands/software-agent-sdk
Canvas Extensions: adversarial fuzz suite for entrypoint/bundle paths
Open
Nobody has claimed this yet.
canvas-extensions
security-related
Stale
testing
- Dominant language
- Python
- Stars
- 1.1k
- Forks
- 539
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 137
Description
Fuzz suite beyond the basic traversal/symlink cases already covered in the Phase 1 test matrix.
Blocked by: OpenHands/software-agent-sdk#4353
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the Phase 1 test matrix and the existing traversal and symlink cases, then inspect the work tracked in OpenHands/software-agent-sdk#4353. Define the additional adversarial cases for entrypoint and bundle paths, and consider the work done when the fuzz suite covers those cases beyond the current matrix.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security, testing-qa
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100