-
Notifications
You must be signed in to change notification settings - Fork 54
Pull requests: GenAI-Security-Project/finbot-ctf
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
GSoC 2026 Final Submission: OWASP FinBot CTF — Challenge Library, Rate Limiting, MCP Server, Bug Fixes
#567
opened Aug 12, 2026 by
ashike24
Loading…
feat(labs): add defensive Guardrail blue challenge pack
#566
opened Aug 11, 2026 by
nitinawari
Contributor
•
Draft
5 tasks
fix(mcp): reject negative limit in FinStripe list_transfers
#565
opened Aug 11, 2026 by
Deez-Automations
Loading…
4 tasks done
fix(mcp): reject negative mock_balance in FinStripe get_account_balance
#564
opened Aug 11, 2026 by
Deez-Automations
Loading…
4 tasks done
fix(mcp): persist vendor_account on FinStripe transfers
#563
opened Aug 11, 2026 by
Deez-Automations
Loading…
4 tasks done
fix(data): raise clear error instead of crashing on missing invoice dates
#562
opened Aug 11, 2026 by
Deez-Automations
Loading…
3 tasks done
fix(mcp): reject control characters in FinDrive filenames
#561
opened Aug 11, 2026 by
Deez-Automations
Loading…
4 tasks done
Week 11: Fix API error responses in mounted sub-apps + challenge contributor guide
#560
opened Aug 10, 2026 by
ashike24
Loading…
Week 9-10: Integration testing + fix chat stream error handling
#559
opened Aug 7, 2026 by
ashike24
Loading…
feat(ctf): Cross-Vendor Email (BOLA/IDOR, ASI-03)
#558
opened Aug 4, 2026 by
Deez-Automations
Loading…
5 tasks done
Week 10-12: CTF Challenge & Detector Development for AEGIS Framework
#553
opened Aug 3, 2026 by
Jean-Regis-M
Contributor
Loading…
fix(mcp): Apply
parameters override in _apply_tool_overrides
#549
opened Jul 22, 2026 by
prince-shakyaa
Loading…
Week 8-9: Implement AEGIS Harness Components for Red-Team Testing Framework
#546
opened Jul 18, 2026 by
Jean-Regis-M
Contributor
Loading…
fix(security): Block unauthenticated MCP tool poisoning on supply-chain write endpoints
#545
opened Jul 14, 2026 by
prince-shakyaa
Loading…
7 tasks done
WEEK 7: Implement Policy Interceptor and Agent Profiles for FinBot Security Framework
#543
opened Jul 12, 2026 by
Jean-Regis-M
Contributor
Loading…
feat(security): standardized security event model
#540
opened Jul 5, 2026 by
nitinawari
Contributor
Loading…
2 tasks
fix(security): Block SSRF in guardrail webhook URL and require authentication on write endpoints
#538
opened Jul 3, 2026 by
prince-shakyaa
Loading…
8 tasks done
feat(guardrails): add before_final_action hook for workflow and chat final commits
#534
opened Jun 26, 2026 by
nitinawari
Contributor
Loading…
6 tasks
feat(trace): add canary infrastructure and CanaryDetector
#533
opened Jun 26, 2026 by
stealthwhizz
Contributor
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.