copilotkit__copilotkit

mirror of https://github.com/CopilotKit/CopilotKit.git synced 2026-09-14 16:26:20 +08:00

Files

T

History

Alem Tuzlak 704cdba704 fix(issue-triage): harden against prompt injection + token exfil

- Wrap untrusted issue title/body/comments in <untrusted_issue_content> +
  system clause instructing the agent to treat them as data, not instructions
  (maintainer gate covers who runs the command, not who authored the issue).
- Sandbox policy flipped to default-deny with a read-only/test allowlist;
  network:deny to cut token exfiltration and direct GitHub-API abuse.
- Token isolation (keep GH_TOKEN out of the agent env) tracked as a pre-merge
  blocker; needs live API validation.

2026-07-02 16:44:28 +02:00

__tests__

chore(docs): remove retired docs app (#5548 )

2026-06-19 07:33:51 -07:00

develop

refactor(docs): optimize structure, content and navigability

2026-03-02 11:30:16 -05:00

doc-tests

test(doc-tests): fix langgraph quickstart doctest

2026-06-19 13:11:05 -07:00

docs

chore(reference): update autogen pipeline for langgraph_agent rename