Offensive testing framework for AI agent systems — prompt injection, MCP attacks, confused deputy, data exfiltration, multi-agent exploitation
active 2026-03-30 → 2026-04-09 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 11 days from 2026-03-30 to 2026-04-09. Pushes: 106 total, peak 46 in a day. Pull requests: 37 total, peak 12 in a day. Issues: 107 total, peak 65 in a day. Comments: 46 total, peak 19 in a day. Stars: 1 total, peak 1 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| isaacschepp | 236 | 62 | 36 | 24 |
| github-actions[bot] | 59 | 42 | 0 | 17 |
| Copilot | 9 | 0 | 0 | 5 |
| dependabot[bot] | 3 | 2 | 1 | 0 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#539isaacschepp2026-04-04 20:59[models] Add timestamp to AttackResult and duration to Score
- Issue#538isaacschepp2026-04-04 20:55[models] Add kw_only=True to AttackResult and PayloadInstance
- Issue#537isaacschepp2026-04-04 20:08[models] Add missing DeliveryVector and TargetOutcome values for 2026 threat landscape
- Issue#525isaacschepp2026-04-04 19:47[cli] Rich progress bar during scan with real-time ASR display
- Issue#521isaacschepp2026-04-04 19:41[models] Add index field to PayloadInstance for deterministic result ordering
- Issue comment#521isaacschepp2026-04-04 19:41[models] Add index field to PayloadInstance for deterministic result ordering
- Issue#519isaacschepp2026-04-04 19:40[engine] Release delivery semaphore before retry backoff sleep
- Issue#533isaacschepp2026-04-04 19:35[scorers] Replace lazy client init with eager init — eliminate theoretical async race
- Pull request#534isaacschepp2026-04-04 19:35
- Pull request#532isaacschepp2026-04-04 19:16
- Issue comment#532github-actions[bot]2026-04-04 19:07feat: configurable judge concurrency + lazy SDK client reuse
- Issue#517isaacschepp2026-04-04 19:06[scorers] Make LLM judge max_concurrent configurable (close adaptive rate limiting as YAGNI)
- Issue comment#517isaacschepp2026-04-04 19:02[scorers] Make LLM judge max_concurrent configurable (close adaptive rate limiting as YAGNI)
- Issue comment#516isaacschepp2026-04-04 18:58[engine] Hierarchical scorer tiers with early-exit consensus
- Issue#528isaacschepp2026-04-04 18:42[ci] Add annotation resolution test and ruff TC003 safeguard for dataclass fields
- Pull request#529isaacschepp2026-04-04 18:42
- Pull request#526isaacschepp2026-04-04 17:39
- Issue#523isaacschepp2026-04-04 17:24[harness] RestAdapter swallows retryable exceptions — engine retries are dead code
- Issue#511isaacschepp2026-04-04 17:24[engine] Differentiated error handling — don't retry non-retryable errors
- Pull request#522isaacschepp2026-04-04 16:49
- Issue comment#515isaacschepp2026-04-04 16:28[engine] Double parallelism — parallel across results and scorers with bounded concurrency
- Issue#520isaacschepp2026-04-04 16:28[engine] Support async on_result callbacks for interleaved pipeline
- Issue#513isaacschepp2026-04-04 15:55[models] Enforce deep immutability on dict fields in frozen dataclasses
- Issue#511isaacschepp2026-04-04 03:47[engine] Differentiated error handling — don't retry non-retryable errors
- Issue#502isaacschepp2026-04-04 02:25[detection] Expand refusal phrases (18→100+) and compliance indicators (10→30+)
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 1 stars here means stars gained during the window, not the repo's star count.