Julio César Suástegui juliosuas

Julio Suástegui

Security / OSINT Engineer — Mexico City

I build security tooling and contribute upstream to open-source Python and TypeScript projects.

Selected upstream work

58 merged PRs · 17 upstream repositories · 16 in Maigret · _{as of October 26, 2026}

	Microsoft · PyRIT · 7 merged PRs `#3529` — `HarmDefinition.from_yaml` returns `Self` for subclasses (part of #3166) `#3470` — `TagQuery` factory classmethods return `Self` for subclasses (part of #3166) `#3369` — Score, objective, and export logic moved out of the chat window into hooks (part of #2652) `#3310` — Conversation loading moved out of the chat window into `useConversationMessages` (part of #2652) `#3251` — Lazy image, audio, and video previews in dataset details (closes #2749) `#3163` — Dataset examples table and seed detail view, server-side pagination (closes #2745) `#3071` — Dataset catalog for the PyRIT GUI: search, filters, sorting, detail view (closes #2747) _{AI red teaming · TypeScript · React · accessibility}
	Maigret · 16 merged PRs `#3175` · `#3100` · `#3121` · `#3135` · `#3024` · `#2930` — Added a shared Mastodon lookup engine, fixed or disabled false-positive site checks (Xing, Pychess, Southklad, and more), added the manifest modern XMind readers need, and improved status-code detection in site submission. _{Python · OSINT · HTTP evidence · report compatibility}
	Anthropic Cybersecurity Skills · 8 merged PRs `#11` · `#15` · `#12` · `#26` — Added an AI-driven OSINT correlation skill, working example output for digital-forensics skills, NIST CSF 2.0 categories on compliance skills, and MITRE ATT&CK IDs on incident-response skills. _{Security skills · OSINT · forensics · compliance · independent community project}
	mitmproxy · 4 merged PRs `#8447` · `#8405` · `#8196` — Added float option support to the mitmweb Options editor, normalized CRLF in the CSS and XML/HTML prettifiers, and fixed an `IndexError` in binary-content detection. _{Python · web UI · traffic inspection}
	Palantir · Blueprint · 1 merged PR `#8165` — Fixed the ESLint rule so it detects deprecated React components imported under aliases. _{TypeScript · React · static analysis}
	Texas Instruments · PRU and Android docs · 3 merged PRs `open-pru #139` · `open-pru #146` · `processor-sdk-doc #720` — Documented portable assembly include paths, fixed typos in the open-pru docs, and normalized Android SDK documentation formatting. _{Embedded systems · assembly toolchains · Linux/Android documentation}
	Sentry · Python SDK · 2 merged PRs `#6241` — Added an option to drop scrubbed user IP addresses instead of sending an invalid placeholder value. _{Python · privacy controls · backward compatibility}
	OWASP · Agent Security Regression Harness · 1 merged PR `#149` — Added custom headers for authenticated HTTP tests. Headers stay out of scenario payloads, traces, and result JSON. _{Python · agent security · authenticated testing}
	Aqua Security · Trivy · 2 merged PRs `#10828` · `#10857` — Corrected spelling and wording in the Trivy documentation. _{Security tooling · documentation}
	Google Labs · design.md · 1 merged PR `#131` — Moved primitive type definitions into spec-config.yaml and rendered them through the spec generator. _{TypeScript · design tooling · specification generation}

Currently focused on: OSINT tooling · AI/agent security · Python security infrastructure (privacy controls, traffic inspection, SBOM tooling)

Selected projects

Project	What it is
ghost	AI-assisted OSINT investigation platform: username checks, analysis, and reports.
copyfail-guard	Auditable Linux mitigation for CVE-2026-31431 (Copy Fail) with AF_ALG seccomp hardening.
AI Garden	A living pixel-art world built collaboratively by AI agents.
VisionClaw	Real-time AI assistant for smart glasses; my open PRs harden iOS/Android secret storage.

All merged PRs

58 merged PRs across 17 upstream repositories · full list

As of October 26, 2026. See the current list on GitHub.

Upstream	Merged contributions
soxoj/maigret _{16 merged}	`#2318` feat: add cybersecurity platforms + re-enable Root-Me `#2442` fix(data): update InterPals absence string to match current site response `#2558` test: loosen executor timing upper bounds for slower CI `#2588` fix: disable RomanticCollection check `#2779` docs: fix typos `#2929` Fix ReverbNation false-positive check `#2930` Fix XMind reports for modern readers `#3024` Detect status-code checks in --submit fallback `#3100` Fix Pychess false-positive check `#3111` Fix social.tchncs.de false-positive check `#3121` Add shared Mastodon engine with accounts/lookup urlProbe `#3128` Disable Jigidi false-positive site `#3131` Disable WikimapiaSearch false-positive site `#3133` Disable Comedy false-positive site `#3135` Disable Southklad false-positive site `#3175` Fix Xing false-positive check
mukul975/Anthropic-Cybersecurity-Skills _{8 merged}	`#11` Add skill: performing-ai-driven-osint-correlation `#12` Add NIST CSF 2.0 categories to compliance-governance skills `#15` Add working example output to digital-forensics skills (fixes #4) `#22` Translate top skills to Spanish for international reach `#26` Add MITRE ATT&CK IDs to incident response skills (fixes #1) `#27` Add skill: performing-cloud-native-threat-hunting-with-aws-detective `#28` Add bulk skill metadata validation script `#29` Add skill: detecting-lateral-movement-with-zeek (fixes #5)
microsoft/PyRIT _{7 merged}	`#3529` MAINT Return Self from HarmDefinition.from_yaml (P311-01) `#3470` MAINT Return Self from TagQuery factory classmethods (P311-01) `#3369` MAINT Extract score, objective and export from ChatWindow into hooks `#3310` MAINT Extract conversation loading from ChatWindow into useConversationMessages `#3251` FEAT: Share image, audio, and video previews with dataset details `#3163` FEAT: Add dataset example table and seed detail view `#3071` FEAT: Add dataset catalog navigation and cards
mitmproxy/mitmproxy _{4 merged}	`#8196` fix: avoid IndexError in is_mostly_bin for short tails `#8285` docs: fix typos `#8405` fix: normalize CRLF in CSS and XML/HTML prettifiers `#8447` mitmweb: support float options in the Options editor
kellyjonbrazil/jc _{4 merged}	`#692` fix: use [2:] instead of lstrip('0x') to strip hex prefix in ifconfig parser `#711` docs: fix typos `#722` Preserve bracketed and empty scalar values `#741` test: find setup.py when tests are copied into a build tree
getsentry/responses _{3 merged}	`#791` fix: remove content-type from headers in _add_from_file to avoid RuntimeError `#800` docs: fix typos `#807` fix: type CallList as a sequence of calls
getsentry/sentry-python _{2 merged}	`#6241` Add option to drop scrubbed user IP addresses `#6602` docs: fix typos
locustio/locust _{2 merged}	`#3384` fix: use total_rps instead of current_rps in HTML report and navbar stats `#3426` docs: fix typos
aquasecurity/trivy _{2 merged}	`#10828` docs: fix repository scan heading typo `#10857` docs: fix typos
TexasInstruments/open-pru _{2 merged}	`#139` docs: add portable assembly include path guidance `#146` docs: fix typos
zeek/package-manager _{2 merged}	`#222` Fix quickstart grammar typo `#224` docs: fix typos
TexasInstruments/processor-sdk-doc _{1 merged}	`#720` style: normalize Android RST indentation
OWASP/Agent-Security-Regression-Harness _{1 merged}	`#149` feat: support live HTTP target headers
palantir/blueprint _{1 merged}	`#8165` [eslint-plugin] Detect deprecated components imported with aliases
google-labs-code/design.md _{1 merged}	`#131` fix: render primitive types from spec config
racecraft-lab/Paddock _{1 merged}	`#86` Enhance Office activity visuals
nicolargo/glances _{1 merged}	`#3505` fix: clamp memory used/percent to non-negative values for LXC containers

_{Anthropic-Cybersecurity-Skills is an independent community project.}

Open PRs

Selected from 43 open upstream PRs as of October 14, 2026.

Project	Proposed change	Status
CycloneDX · cyclonedx-python #1106	Add an `--isolated` option so environment SBOMs ignore the parent `PYTHONPATH`.	In review
Nous Research · Hermes Agent #121776	Make browser close-profile wait for exit and clear a stale `SingletonLock`.	In review
Nmap #3458	Clarify the IPv6 protocol-family context in packet-trace output.	In review
PyPA · Hatch #2405	Support free-threaded Python aliases such as `3.13t` and `3.14t`.	In review
Maigret · 13 open PRs	False-positive site fixes and disables (CNET, InterPals, PCGamer, Coderwall, and more).	In review

All open PRs →

Languages and tools

portfolio · ghost · repositories · merged PRs · all pull requests

Navigation Menu

Julio César Suástegui juliosuas

Achievements