Skip to content

security: Semgrep LLM security remediation - #40

Closed
aviggiano wants to merge 1 commit into
mainfrom
codex/sec-skill-semgrep-llm-security
Closed

aviggiano wants to merge 1 commit into
mainfrom
codex/sec-skill-semgrep-llm-security

Conversation

@aviggiano

Copy link
Copy Markdown
Collaborator

Draft remediation for Semgrep LLM security.

References (titles only):

  • C-01
  • H-01
  • H-02
  • M-03

Started from origin/main. This pull request intentionally omits issue details.

@aviggiano

Copy link
Copy Markdown
Collaborator Author

Superseded by #45. We kept environment filtering, dedicated judge credentials and private-data consent, and judge prompt-injection hardening. Dangerous agent flags and unrestricted agent execution remain intentional parts of the threat model.

@aviggiano aviggiano closed this Jul 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant