PostHog/warlock

View on GitHub

Agent security and hardening

Stars: 0
Forks: 1
Open beginner issues: 0
Indexed issues: 21

Dominant language: TypeScript
License: MIT
Last GitHub push: Jul 24, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

21 open issues indexed

Replace #63 stopgap in posthog_feature_attack (tighten TP shape) + consumers must not block trusted first-party skills untriaged Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PostHog/warlock#65 · Opened Jul 24, 2026
Make warlock integration harness-agnostic: per-run scanner instance + streaming results Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

PostHog/warlock#53 · 1 comment · Opened Jun 24, 2026
holy moly clean up docs Open

PostHog/warlock#48 · 1 assignee · Opened Jun 9, 2026
Add scanFiles(filePaths, llmProvider?) API for per-match content windowing Open

Difficulty 4/5 3-5 days Newbie friendliness 62/100

PostHog/warlock#35 · Opened Jun 5, 2026
Add INTEGRATING.md guide for consumers Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

PostHog/warlock#31 · Opened Jun 2, 2026
Make LLM triage deterministic + plug-and-play (rules-only engine, provider adapters, sane defaults) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

PostHog/warlock#30 · Opened Jun 2, 2026
move llm prompts to separate commandments file Open

PostHog/warlock#28 · 1 assignee · Opened May 8, 2026
Expand hardcoded secret detection using open-source references Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PostHog/warlock#24 · Opened May 4, 2026
New rule: detect global pip installs (and other non-JS package managers) Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

PostHog/warlock#23 · Opened May 4, 2026
Redesign: should agents be allowed to git push at all? Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

PostHog/warlock#22 · 1 comment · Opened May 4, 2026
New rule: detect git remote set-url / git remote add (remote hijacking) Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

PostHog/warlock#21 · Opened May 4, 2026
New rule: detect registry hijacking and competitor SDK injection Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

PostHog/warlock#20 · Opened May 4, 2026
New rule: detect suspicious encoded blobs in comments (beyond base64) Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

PostHog/warlock#19 · Opened May 4, 2026
New rule: block sudo / su privilege escalation Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

PostHog/warlock#18 · Opened May 4, 2026
New rule: detect git rebase -i / history rewriting Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 38/100

PostHog/warlock#17 · Opened May 4, 2026
new rule for prime-injection pattern Open

PostHog/warlock#15 · 1 assignee · Opened Apr 30, 2026
lexicon consistency checks Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PostHog/warlock#11 · Opened Apr 24, 2026
expand destructive filesystem detection to non-deletion tools Open

PostHog/warlock#6 · 1 assignee · Opened Apr 22, 2026
expand base64 injection detection beyond code comments Open

PostHog/warlock#5 · 1 assignee · Opened Apr 22, 2026
prompt injection obfuscation detection Open

PostHog/warlock#4 · 1 assignee · Opened Apr 22, 2026
multi-language prompt injection detection Open

PostHog/warlock#3 · 1 assignee · Opened Apr 22, 2026

PostHog/warlock

Get new issues in your inbox