Help Wanted

AI Summary: The DataMapper incorrectly handles XSD sequences with multiple references to the same abstract element. It drops subsequent references because they generate duplicate field names, leading to only the first reference being parsed. The issue proposes a solution similar to how choice wrappers are handled, by assigning unique synthetic names to these abstract wrapper fields.

AI Summary: This issue is a beginner-friendly task to add a new trivia question about a Japanese city with a floating garden observatory to the project's JSON file. No coding is required, and the contribution can be made directly from the browser in under a minute.

AI Summary: A user is reporting that YouTube videos are not automatically entering fullscreen mode when the "Auto-fullscreen" setting is enabled in the ImprovedTube extension. The issue occurs on Firefox 152.0.5 on Ubuntu 24.04, and the user notes that there are numerous errors in the browser console.

AI Summary: This issue is a beginner-friendly task to add a new Japanese proverb to a JSON file. It requires no coding or local setup, and can be completed directly in the browser by forking the repository, editing the JSON file, and submitting a pull request. The contribution is designed to be quick and easy for new open-source contributors.

AI Summary: This issue addresses the presence of several temporary, issue-specific files (e.g., `.env.example.issue93`, `BACKEND_INTEGRATION_EXAMPLE_ISSUE93.js`) that were accidentally committed to the repository root. The proposed fix involves removing these files and potentially merging any useful content into existing base files, as well as updating `.gitignore` to prevent similar occurrences in the future.

AI Summary: This issue highlights a critical security vulnerability where hardcoded admin credentials are exposed in the public README and production deployment guide of a live system managing real student data. The proposed fix involves immediately changing the password, removing credentials from public documentation, and replacing them with placeholders and instructions for obtaining access.

AI Summary: This issue proposes creating a short cookbook page to guide users through testing their agent with ProbeAgent. The goal is to enable newcomers to quickly set up and run a test, interpret the JSON output, and take action, using only real commands.

AI Summary: This issue requests the expansion of PyRIT's red-teaming capabilities beyond credential exfiltration. The goal is to add new objectives and scoring mechanisms for other types of harms, specifically system-prompt leaks and tool misuse, within the `pyrit_redteam.py` file. Successful implementation will allow the `--redteam` functionality to address these additional vulnerabilities.

AI Summary: This issue proposes the addition of a new attack category called 'Memory/Context Poisoning' to the project. It involves creating a new Python file for strategies that plant persistent malicious context, which agents will later trust, aligning with OWASP ASI06. The work is considered done when the new category is implemented with tagged strategies, tests, and updated documentation.

AI Summary: This issue proposes adding support for a new agent framework as a target type within the probe agent. The task involves creating a new target adapter, registering it in the factory, and ensuring it can successfully validate and attack a real instance of the framework, with tests using respx.

AI Summary: This issue proposes adding functionality to the `probeagent` tool to directly import public seed datasets using a new `--seeds` flag. A converter will need to be created to map the public dataset's schema to the ProbeAgent's seed format. The goal is to enable running attacks with a pre-defined public corpus.

AI Summary: This issue proposes adding remediation guidance to security findings. Instead of just stating a finding like 'compromised', the system should also provide actionable steps on how to fix the issue, starting with the 'credential_exfil' category. The proposed solution involves adding a 'remediation' field to the attack class and reporter configuration.

AI Summary: This issue involves enhancing the refusal grader by adding more phrasings that the current analyzer might miss. The task requires updating a specific Python file (`analyzer.py`) with new patterns and ensuring these additions are covered by new tests without breaking existing ones.

AI Summary: This issue requests the addition of a new evasion technique to the probe agent's converters. The task involves implementing a string transformation function and registering it within the existing converter system, ensuring it's covered by unit tests.

AI Summary: This issue requests the addition of a new prompt injection attack strategy to the `probeagent` library. The new strategy needs to be registered and tested, with its presence reflected in the README. The contributor is directed to existing documentation for guidance.

AI Summary: This issue serves as a central hub for advisory findings from Hive agents, particularly those operating at lower ACMM levels. These agents analyze code and report issues here without creating separate tickets or pull requests. The governor will periodically post digests of these findings, and the issue should not be closed as it's a continuously updated document.

AI Summary: This issue proposes adding a Dev Container configuration to the repository. The goal is to enable contributors to easily open the project in GitHub Codespaces, eliminating local setup complexities and lowering the barrier for new contributors to make their first pull request.

AI Summary: The issue describes a bug where user mentions in comments are not being hyperlinked if the case of the username in the mention does not exactly match the actual username. The reporter suspects this might be related to a recent database migration to SQLite.

AI Summary: The `openai-agents` library has a bug where it fails to provide a required field (`cache_write_tokens`) when constructing usage details, causing crashes when used with `openai` version 2.45.0 or later. The current dependency constraints in `pyproject.toml` allow this incompatible combination to be installed.

AI Summary: This issue highlights a security vulnerability where several GitHub Actions workflows lack a top-level `permissions:` block. This allows the `GITHUB_TOKEN` to have broader permissions than necessary, potentially enabling compromised actions to perform unauthorized operations like pushing commits or mutating releases. The recommendation is to add granular `permissions:` blocks to each workflow to enforce the principle of least privilege.

AI Summary: This issue highlights a security vulnerability where 13 GitHub workflows lack a top-level `permissions:` block. This allows the default, broad scope of the `GITHUB_TOKEN` to be used, potentially enabling compromised actions to perform unauthorized operations like pushing commits or mutating releases. The recommendation is to add specific `permissions:` blocks to each workflow to enforce the principle of least privilege.

AI Summary: This issue is a beginner-friendly task to add a new fun fact about Japan to a JSON file. No coding experience is required, and the contribution can be made directly from the browser in under a minute. It's designed for first-time contributors and Hacktoberfest participants.

AI Summary: This issue proposes a shift from releasing on every commit to a scheduled weekly release cadence. It also requests the ability to trigger manual releases for urgent updates, aiming to streamline the release process and maintain stability.

AI Summary: A bug in the Omnigent configuration parser causes the `use_responses: false` setting in `config.yaml` bundles to be incorrectly interpreted as `true`. This happens because the parser converts boolean `false` to the string "False", which is then evaluated as truthy by the `openai-agents` harness, leading to unexpected behavior.

AI Summary: This issue proposes consolidating and parallelizing CI tasks by refactoring 'just' recipes. The goal is to improve build/download times and organize operations by language domain, introducing specific commands for each language and a general command for all.

AI Summary: This issue requests an enhancement to clarify the state chart's description. The goal is to explicitly state that the chart displays raw SINAN notifications grouped by notification week, preventing confusion with bulletin totals.

AI Summary: This issue is a beginner-friendly task to add a new color theme called "Mountain Cedar" to the KanaDojo project. It requires no coding and can be completed in under a minute by directly editing a JSON file in the browser, making it ideal for new open-source contributors.

AI Summary: A bug causes ACMM level switches to not persist correctly to hive configuration files, leading to silent reverts to a lower level upon pod restarts. This happens because the configuration restoration process overwrites the intended level without generating an audit log, causing agents to run advisory templates instead of implemented ones. Proposed fixes include ensuring synchronous persistence of level switches, adding boot-time checks for level mismatches with audit logging, and potentially making the audit log the primary source of truth for the hive level.

AI Summary: This enhancement request proposes adding a CLI tool to automatically detect and report unused CSS custom properties within the EaseMotion CSS project. The tool would scan CSS files, identify declared variables, and compare them against their references to highlight obsolete tokens, improving maintainability and reducing confusion for contributors.

AI Summary: This issue is a beginner-friendly task to add a single markdown line to a community notes file. No coding experience or repository setup is required, making it ideal for first-time open-source contributors and Hacktoberfest participants. The contribution can be completed directly in the browser within a minute.