Issues

• check_force_push scans raw unquoted text — false-positives on documentation/commit-message content

  backlog
  jamessoubry/clawband#317 · Filter by author jamessoubry opened on Sep 30, 2026

• Table-drive the e2e_*_ask_fallback_*/deny_uses_block_json tests in tests/cli.rs

  backlog
  jamessoubry/clawband#312 · Filter by author jamessoubry opened on Sep 30, 2026

• Extract shared struct for install_* functions' duplicated 6-argument shape

  backlog
  jamessoubry/clawband#311 · Filter by author jamessoubry opened on Sep 30, 2026

• Parameterize duplicated python_*_load_findings functions in ast_guard.rs

  backlog
  jamessoubry/clawband#310 · Filter by author jamessoubry opened on Sep 30, 2026

• write-then-exec ask fallback can't scan non-heredoc content generation (grep/head/cut extraction) and message is misleading about target file

  backlog
  jamessoubry/clawband#304 · Filter by author jamessoubry opened on Sep 25, 2026

• Bridge ast_guard verdicts across hook invocations (self-receipt) to skip redundant chained-script asks

  backlog
  jamessoubry/clawband#300 · Filter by author jamessoubry opened on Sep 24, 2026

• No fuzz targets or benchmark suite exist

  backlog
  jamessoubry/clawband#287 · Filter by author jamessoubry opened on Sep 5, 2026

• investigate: brew reports stale clawband version (2.99.0) despite binary self-updating to 3.7.15

  jamessoubry/clawband#277 · Filter by author jamessoubry opened on Sep 4, 2026

• feature: include clawband version in each ~/.clawband.log line

  backlog
  jamessoubry/clawband#276 · Filter by author jamessoubry opened on Sep 4, 2026

• Scoping: GitHub Actions workflow injection + script-tag SRI checks fall outside ast_guard's language support

  pr-pending
  jamessoubry/clawband#265 · Filter by author jamessoubry opened on Sep 1, 2026

• fix: chained-script false positive — usage examples in Python docstrings match interpreter pattern

  jamessoubry/clawband#213 · Filter by author jamessoubry opened on Jul 3, 2026

• fix: false positive — pipe-to-interpreter match inside --body/--message string arguments to safe CLI tools

  jamessoubry/clawband#212 · Filter by author jamessoubry opened on Jul 2, 2026

• feat: scan subprocess/os.system arguments rather than blanket-asking on any chained call

  jamessoubry/clawband#211 · Filter by author jamessoubry opened on Jul 2, 2026

• feat: show extracted subprocess calls in chained-execution ask message

  jamessoubry/clawband#209 · Filter by author jamessoubry opened on Jul 1, 2026

• Windows-native support (beyond WSL)

  enhancement
  jamessoubry/clawband#65 · Filter by author jamessoubry opened on Jun 11, 2026

• Publish OpenClaw & OpenCode plugins to ClawHub/npm for one-line install

  enhancement
  jamessoubry/clawband#64 · Filter by author jamessoubry opened on Jun 11, 2026