Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lmvdz/oh-my-pi

              main @ 644ad30
            

206

Fixes

CVEs

CRITICAL

Peak severity

22.2%

Coverage

Highlights

Information Disclosure: 92 prior fixes. Scrutinize any change in this area.

packages/coding-agent/src/secrets/obfuscator.ts: most-fixed (50 issues). Treat as high-risk during review.

123 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: The obfuscator is the central defense against secret leakage to LLM providers, and it has been patched dozens of times for edge cases where raw secrets or placeholder tokens leak. This is the highest-risk component due to the sheer volume of fixes and the complexity of the redaction logic.

Auth Bypass: Multiple fixes show the ACP permission gate can be bypassed through default approvalMode settings, missing autoApprove flags, or mounted tools not being wrapped. This is a critical control for preventing unauthorized tool execution.

Privilege Escalation: The Cursor exec bridge has multiple fixes for tool resolution order, unadvertised edit operations, and native delete gating, indicating a complex attack surface where approval wrappers can be skipped.