Hey y’all, I'm back! Needed to focus on my new job for a while, but now I have capacity to continue contributing to OpenHands. If you need extra 👀 on anything security, perf, or general fixes, @ me. Otherwise I'll be working issues. 🐕

Hey Nelson, welcome back! 🎉 Strange times. Just so you know, I'm engaged in a large openhands + agent-sdk experiment, I think you've seen it actually - running the tooling from Add verify-agent-server: an executable feature map and control CLI for the Agent Server API - #5621

I am a part of something bigger than just myself 😳

I think will be nice to finish all the part about security in the sdk 🫣😄

@modern-fireman-99755 all? What's left, give me a list :)

Hi @refined-secretary-75241, let us discuss whether we can share some!

Ah no i was speaking about the security analyzer which is part of the agent. tomorrow i will share the issues @refined-secretary-75241 but it is just what you were working on with another contributor

Sounds good!!

• Replace regex-based shell command analysis with tree-sitter-bash: github.com/OpenHands/software-agent-sdk/issues/2721 • Extend defense_in_depth PatternSecurityAnalyzer with Agent Threat Rules signatures: github.com/OpenHands/software-agent-sdk/issues/3176 • Supply-chain typosquat detection, a deterministic sibling analyzer: github.com/OpenHands/software-agent-sdk/issues/3560

On it!