Issues

• Approvals: "Ask why" asks the agent to explain, and shows its answer on the retried request

  enhancementhelp wanted
  batrapulkit/squidbrake#148 · Filter by author batrapulkit opened on Oct 28, 2026
  1

  

• Example rule pack: Kubernetes MCP server

  documentationgood first issuehacktoberfest
  batrapulkit/squidbrake#147 · Filter by author batrapulkit opened on Oct 28, 2026
  3

  

• Example rule pack: Jira / Confluence (Atlassian) MCP server

  documentationgood first issuehacktoberfest
  batrapulkit/squidbrake#146 · Filter by author batrapulkit opened on Oct 28, 2026

• Notifications: Telegram bot, with an Open button on approval messages

  enhancementgood first issuehacktoberfest
  batrapulkit/squidbrake#145 · Filter by author batrapulkit opened on Oct 28, 2026

• Incident replay: MCPoison, an approved Cursor MCP config is swapped later (CVE-2025-54136)

  hacktoberfesthelp wanted
  batrapulkit/squidbrake#142 · Filter by author batrapulkit opened on Oct 28, 2026

• Incident replay: Claude Code leaks secrets through DNS lookups (CVE-2025-55284)

  hacktoberfesthelp wanted
  batrapulkit/squidbrake#141 · Filter by author batrapulkit opened on Oct 28, 2026

• CLI: squidbrake replay <transcript> shows what it would have stopped in a past Claude Code session

  enhancementhacktoberfesthelp wanted
  batrapulkit/squidbrake#140 · Filter by author batrapulkit opened on Oct 28, 2026

• CI: install and run doctor from a path with spaces (C:\Users\Rahul Kumar)

  enhancementhacktoberfesthelp wanted
  batrapulkit/squidbrake#79 · Filter by author batrapulkit opened on Oct 13, 2026
  1

• connect all --remove creates an empty ~/.cursor/hooks.json when Cursor isn't installed

  buggood first issuehacktoberfest
  batrapulkit/squidbrake#75 · Filter by author batrapulkit opened on Oct 13, 2026
  3

  

• Incident replay: s1ngularity, a malicious nx package runs AI coding CLIs to hunt for secrets

  hacktoberfesthelp wanted
  batrapulkit/squidbrake#73 · Filter by author batrapulkit opened on Oct 13, 2026

• Start here: good first issues for Hacktoberfest, grouped by type

  hacktoberfest
  batrapulkit/squidbrake#46 · Filter by author batrapulkit opened on Oct 1, 2026
  3

• Example: guard OpenAI Agents SDK function tools

  documentationhacktoberfesthelp wanted
  batrapulkit/squidbrake#44 · Filter by author batrapulkit opened on Oct 1, 2026

• Example: guard a LangGraph agent's tools

  documentationhacktoberfesthelp wanted
  batrapulkit/squidbrake#43 · Filter by author batrapulkit opened on Oct 1, 2026

• Incident replay: Gemini CLI destroys a user's files while reorganising a folder

  good first issuehacktoberfest
  batrapulkit/squidbrake#35 · Filter by author batrapulkit opened on Oct 1, 2026

• Example rule pack: Gmail MCP server

  documentationgood first issuehacktoberfest
  batrapulkit/squidbrake#34 · Filter by author batrapulkit opened on Oct 1, 2026

• Example rule pack: Notion MCP server

  documentationgood first issuehacktoberfest
  batrapulkit/squidbrake#32 · Filter by author batrapulkit opened on Oct 1, 2026

• Example rule pack: Linear MCP server

  documentationgood first issuehacktoberfest
  batrapulkit/squidbrake#31 · Filter by author batrapulkit opened on Oct 1, 2026

• Command reader: commands that make something public or grant admin (put-bucket-acl public-read, AdministratorAccess)

  enhancementgood first issuehacktoberfest
  batrapulkit/squidbrake#29 · Filter by author batrapulkit opened on Oct 1, 2026

• Command reader: cloud CLI verbs written with a colon (heroku pg:reset, firebase firestore:delete) and bq rm

  enhancementgood first issuehacktoberfest
  batrapulkit/squidbrake#28 · Filter by author batrapulkit opened on Oct 1, 2026

• Command reader: commands that switch off protection (ufw disable, iptables -F, netsh advfirewall, setenforce 0)

  enhancementgood first issuehacktoberfest
  batrapulkit/squidbrake#26 · Filter by author batrapulkit opened on Oct 1, 2026

• Command reader: inline interpreter code can't be read (python -c, node -e, perl -e, ruby -e)

  enhancementgood first issuehacktoberfest
  batrapulkit/squidbrake#24 · Filter by author batrapulkit opened on Oct 1, 2026

• Command reader: sync commands that delete (rsync --delete, aws s3 sync --delete, robocopy /MIR, rclone)

  enhancementgood first issuehacktoberfest
  batrapulkit/squidbrake#23 · Filter by author batrapulkit opened on Oct 1, 2026

• Roadmap: reach checks for AWS (stop agents from quietly giving themselves admin)

  enhancementroadmap
  batrapulkit/squidbrake#18 · Filter by author batrapulkit opened on Oct 1, 2026

• Optional risk-model plug-in (e.g. Jev, or a local model): can escalate, never allow

  enhancementhacktoberfesthelp wanted
  batrapulkit/squidbrake#16 · Filter by author batrapulkit opened on Sep 30, 2026