Issues

• Replace #63 stopgap in posthog_feature_attack (tighten TP shape) + consumers must not block trusted first-party skills untriaged

  PostHog/warlock#65 · Filter by author sarahxsanders opened on Jul 24, 2026

• Make warlock integration harness-agnostic: per-run scanner instance + streaming results

  PostHog/warlock#53 · Filter by author sarahxsanders opened on Jun 24, 2026
  1

• holy moly clean up docs

  PostHog/warlock#48 · Filter by author sarahxsanders opened on Jun 9, 2026
  

• Add scanFiles(filePaths, llmProvider?) API for per-match content windowing

  PostHog/warlock#35 · Filter by author sarahxsanders opened on Jun 5, 2026

• Add INTEGRATING.md guide for consumers

  PostHog/warlock#31 · Filter by author sarahxsanders opened on Jun 2, 2026

• Make LLM triage deterministic + plug-and-play (rules-only engine, provider adapters, sane defaults)

  PostHog/warlock#30 · Filter by author sarahxsanders opened on Jun 2, 2026

• move llm prompts to separate commandments file

  PostHog/warlock#28 · Filter by author sarahxsanders opened on May 8, 2026
  

• Expand hardcoded secret detection using open-source references

  enhancement
  PostHog/warlock#24 · Filter by author sarahxsanders opened on May 4, 2026

• New rule: detect global pip installs (and other non-JS package managers)

  enhancement
  PostHog/warlock#23 · Filter by author sarahxsanders opened on May 4, 2026

• Redesign: should agents be allowed to git push at all?

  enhancement
  PostHog/warlock#22 · Filter by author sarahxsanders opened on May 4, 2026
  1

• New rule: detect git remote set-url / git remote add (remote hijacking)

  enhancement
  PostHog/warlock#21 · Filter by author sarahxsanders opened on May 4, 2026

• New rule: detect registry hijacking and competitor SDK injection

  enhancement
  PostHog/warlock#20 · Filter by author sarahxsanders opened on May 4, 2026

• New rule: detect suspicious encoded blobs in comments (beyond base64)

  enhancement
  PostHog/warlock#19 · Filter by author sarahxsanders opened on May 4, 2026

• New rule: block sudo / su privilege escalation

  enhancement
  PostHog/warlock#18 · Filter by author sarahxsanders opened on May 4, 2026

• New rule: detect git rebase -i / history rewriting

  enhancement
  PostHog/warlock#17 · Filter by author sarahxsanders opened on May 4, 2026

• new rule for prime-injection pattern

  PostHog/warlock#15 · Filter by author sarahxsanders opened on Apr 30, 2026
  

• lexicon consistency checks

  PostHog/warlock#11 · Filter by author sarahxsanders opened on Apr 24, 2026

• expand destructive filesystem detection to non-deletion tools

  PostHog/warlock#6 · Filter by author sarahxsanders opened on Apr 22, 2026
  

• expand base64 injection detection beyond code comments

  PostHog/warlock#5 · Filter by author sarahxsanders opened on Apr 22, 2026
  

• prompt injection obfuscation detection

  PostHog/warlock#4 · Filter by author sarahxsanders opened on Apr 22, 2026
  

• multi-language prompt injection detection

  PostHog/warlock#3 · Filter by author sarahxsanders opened on Apr 22, 2026
  1