Issues

• On-chain pack: injected recipient swap under the spend limit

  attack-catalogenhancement
  invarislabs/invaris-agentsec#69 · Filter by author tinniaru3005 opened on Nov 5, 2026

• Pull request comment: list every side-effect tool call, not just findings

  enhancementgithub-action
  invarislabs/invaris-agentsec#68 · Filter by author tinniaru3005 opened on Nov 5, 2026

• Finding triage: disputed, false positive, confirmed

  dashboardenhancementreporting
  invarislabs/invaris-agentsec#67 · Filter by author tinniaru3005 opened on Nov 5, 2026

• Test that agents get human approval before high-risk actions

  attack-catalogenhancementpolicy
  invarislabs/invaris-agentsec#66 · Filter by author tinniaru3005 opened on Nov 5, 2026

• Let a task name the actions that are off limits for it

  enhancementpolicy
  invarislabs/invaris-agentsec#65 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Add an irreversible effect tag that raises severity

  enhancementevaluationgood first issue
  invarislabs/invaris-agentsec#64 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Track where untrusted text came from across steps and agents

  enhancementevaluationmulti-agent
  invarislabs/invaris-agentsec#63 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Evidence bundle and evaluator health in every report

  enhancementreporting
  invarislabs/invaris-agentsec#62 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Authority claims later in a session (“I’m the CEO” at turn N)

  attack-catalogenhancement
  invarislabs/invaris-agentsec#61 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Detect forbidden actions done through an allowed tool

  enhancementevaluationresearch
  invarislabs/invaris-agentsec#60 · Filter by author tinniaru3005 opened on Nov 3, 2026

• agentsec demo: run the vulnerable demo agent from a plain pip install

  enhancementonboarding
  invarislabs/invaris-agentsec#59 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Clear error when the agent endpoint isn’t set or isn’t reachable

  enhancementgood first issueonboarding
  invarislabs/invaris-agentsec#58 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Docs: say clearly that self-reported tool calls are recorded, not intercepted

  documentation
  invarislabs/invaris-agentsec#57 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Track the inconclusive rate and warn when it rises

  enhancementreporting
  invarislabs/invaris-agentsec#56 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Repeat each scenario N times and report a pass rate

  enhancementevaluation
  invarislabs/invaris-agentsec#55 · Filter by author tinniaru3005 opened on Nov 3, 2026

• MCP pin: store full definitions and show a diff on change

  enhancementmcp
  invarislabs/invaris-agentsec#54 · Filter by author tinniaru3005 opened on Nov 3, 2026

• Feature request: held-out attack split

  invarislabs/invaris-agentsec#53 · Filter by author octohall-adam opened on Nov 2, 2026

• Add a refuse-everything baseline agent

  enhancementgood first issue
  invarislabs/invaris-agentsec#51 · Filter by author tinniaru3005 opened on Oct 30, 2026

• Report task completion alongside hijack rate on the same runs

  enhancementhelp wanted
  invarislabs/invaris-agentsec#50 · Filter by author nimadflow opened on Oct 30, 2026
  2