Issues

• The agentic loop pivots to other hosts and guesses CVEs

  sooryathejas/METATRON#36 · Filter by author fotsopatrick opened on Sep 7, 2026

• run_curl_headers follows redirects to localhost/IMDS with no host restriction — SSRF leaks internal headers into recon

  sooryathejas/METATRON#33 · Filter by author FabioLeitao opened on Sep 1, 2026

• Tool arguments are LLM-controlled with no target scoping — allowlist covers the tool, not the target

  sooryathejas/METATRON#32 · Filter by author FabioLeitao opened on Aug 20, 2026
  3

• Metatron

  sooryathejas/METATRON#31 · Filter by author Codjhoney opened on May 31, 2026

• False positive?

  sooryathejas/METATRON#28 · Filter by author theodoreapeters opened on May 12, 2026

• add these things and it turns into John wick

  sooryathejas/METATRON#25 · Filter by author kgg57378 opened on Apr 25, 2026
  1

• Anyway to run this on Windows?

  sooryathejas/METATRON#24 · Filter by author AGPLPL opened on Apr 21, 2026
  5

• Ollama timeout

  sooryathejas/METATRON#21 · Filter by author gdzvuke opened on Apr 15, 2026
  7

• Hi Soorya

  sooryathejas/METATRON#18 · Filter by author zakariazakia15-jpg opened on Apr 9, 2026
  4

• Allow use of external Ollama instance

  sooryathejas/METATRON#10 · Filter by author teward opened on Apr 7, 2026
  3

• This repo would benefit from single-command install and setup script

  sooryathejas/METATRON#7 · Filter by author BonifacioCalindoro opened on Apr 6, 2026
  6