Issues

• An unrecognised hook name is dropped with no record or warning

  bug
  blitzcrieg1/agentmetry#392 · Filter by author blitzcrieg1 opened on Nov 7, 2026

• Shell quoting inside the command word defeats PIPE_TO_SHELL, so a download cradle goes undetected

  bugdetection-rule
  blitzcrieg1/agentmetry#391 · Filter by author blitzcrieg1 opened on Nov 7, 2026

• A flag before -c defeats the #50 exemption, so curl into python -I -c fires critical

  bugdetection-rule
  blitzcrieg1/agentmetry#388 · Filter by author blitzcrieg1 opened on Nov 7, 2026

• scan: a skill's scripts are never read, and the report does not say so

  enhancement
  blitzcrieg1/agentmetry#360 · Filter by author blitzcrieg1 opened on Oct 31, 2026

• detection: what the shipped mapper makes of the ThreatLabz AI-assisted campaign (more #55 cases, and model-server redirection)

  detection-rule
  blitzcrieg1/agentmetry#359 · Filter by author blitzcrieg1 opened on Oct 31, 2026

• A script written to a file and then run hides its content from classification

  bugdetection-rule
  blitzcrieg1/agentmetry#347 · Filter by author blitzcrieg1 opened on Oct 30, 2026

• base64 decoded into a shell is not classified

  bugdetection-rule
  blitzcrieg1/agentmetry#346 · Filter by author blitzcrieg1 opened on Oct 30, 2026

• A heredoc executed by a shell is not classified

  bugdetection-rule
  blitzcrieg1/agentmetry#345 · Filter by author blitzcrieg1 opened on Oct 30, 2026

• detection: four false-positive shapes from week 6 to 10 triage (hf in a path, Remove-Item Env:, .env key names, text in a written file)

  detection-rule
  blitzcrieg1/agentmetry#329 · Filter by author blitzcrieg1 opened on Oct 23, 2026
  1

• heartbeat: degrade when a configured anchor goes stale or the local chain fails to verify

  enhancement
  blitzcrieg1/agentmetry#318 · Filter by author blitzcrieg1 opened on Oct 22, 2026

• detection: agent-specific signals to add after the freeze

  detection-rule
  blitzcrieg1/agentmetry#317 · Filter by author blitzcrieg1 opened on Oct 22, 2026

• proof: run each 'built against docs, never run live' surface live

  documentation
  blitzcrieg1/agentmetry#316 · Filter by author blitzcrieg1 opened on Oct 22, 2026
  1

• export: OTLP output for teams standardised on an OpenTelemetry collector

  enhancement
  blitzcrieg1/agentmetry#315 · Filter by author blitzcrieg1 opened on Oct 22, 2026

• fleet: require HMAC argument hashing on fleet installs

  enhancement
  blitzcrieg1/agentmetry#314 · Filter by author blitzcrieg1 opened on Oct 22, 2026

• security: run the recorder under its own account on developer machines

  enhancement
  blitzcrieg1/agentmetry#313 · Filter by author blitzcrieg1 opened on Oct 22, 2026

• dashboard --dev-server signs in on 127.0.0.1 while the dev dashboard calls localhost, so every request is 401

  blitzcrieg1/agentmetry#301 · Filter by author blitzcrieg1 opened on Oct 21, 2026

• Coverage reports Codex as hooked while Codex is waiting for the user to approve the hooks

  blitzcrieg1/agentmetry#300 · Filter by author blitzcrieg1 opened on Oct 21, 2026
  1

• Time and token breakdown by task, agent and tool

  enhancement
  blitzcrieg1/agentmetry#295 · Filter by author blitzcrieg1 opened on Oct 20, 2026

• Guardrail receipts: record other guardrails' allow and deny decisions in the trail

  enhancement
  blitzcrieg1/agentmetry#294 · Filter by author blitzcrieg1 opened on Oct 20, 2026

• Local honeytokens: decoy credentials whose use is a near-certain finding

  dlp-ruleenhancement
  blitzcrieg1/agentmetry#293 · Filter by author blitzcrieg1 opened on Oct 20, 2026

• mcp audit: show each MCP server's blast radius, not just that it is configured

  enhancement
  blitzcrieg1/agentmetry#292 · Filter by author blitzcrieg1 opened on Oct 20, 2026

• release: signed standalone binaries per OS, after EV signing

  enhancement
  blitzcrieg1/agentmetry#233 · Filter by author blitzcrieg1 opened on Oct 10, 2026

• import: Numbat and AgentSight output, as the evidence and SIEM layer under them

  enhancement
  blitzcrieg1/agentmetry#232 · Filter by author blitzcrieg1 opened on Oct 10, 2026

• reconstruct: rebuild past sessions from the agents' own on-disk logs

  enhancement
  blitzcrieg1/agentmetry#231 · Filter by author blitzcrieg1 opened on Oct 10, 2026

• backtest: run a rule over your own recent trail before you enable it

  enhancement
  blitzcrieg1/agentmetry#230 · Filter by author blitzcrieg1 opened on Oct 10, 2026