AI-assisted GitHub Security Lab research that the official AI-agent index verifies without identifying the particular agent or workflow on the individual advisory.
1
Indexed entries
8
CVE IDs tracked
1
Critical/high entries
82%
Evidence index
GHSL system-unspecified AI-agent advisories: 2 public advisory pages. Count checked July 20, 2026. GitHub categorizes both 7-Zip pages as AI-agent discoveries, while the individual pages credit the researcher but do not identify Taskflow or another agent. Open tracker.
What is verified
GitHub Security Lab’s dedicated AI-agent index includes two 7-Zip advisory
pages published on May 22, 2026. Together they cover eight assigned CVEs and
one additional fixed GHSL report without a CVE. The individual pages credit
GitHub Security Lab researcher Jaroslav Lobačevski but do not name Taskflow or
another AI system.
Bugflation therefore records the AI-assisted provenance directly from GitHub’s
category while leaving the system unspecified. This prevents the findings from
being lost without inferring a Taskflow credit that the available sources do
not make.