$\DeclareMathOperator\Aut{Aut}\DeclareMathOperator\Inn{Inn}\DeclareMathOperator\GL{GL}\DeclareMathOperator\SL{SL}$Let $F_2$ be a free group of rank 2. There is a surjection $\Aut(F_2)\rightarrow \GL(2,\mathbb{Z})$ with kernel $\Inn(F_2)$, induced by the abelianization map $F_2\rightarrow\mathbb{Z}^2$. Define $\Aut^+(F_2)$ to be the inverse image of $\SL(2,\mathbb{Z})$. Is every automorphism of $\Aut^+(F_2)$ induced by conjugation by something in $\Aut(F_2)$?
Since there seems to be some confusion in the comments, by an "automorphism of $\Aut^+(F_2)$", I mean an automorphism of the group $\Aut^+(F_2)$, not an automorphism of $F_2$.
This is analogous to the known result that $\Aut(F_2)$ is complete (due to Dyer–Formanek "The automorphism group of a free group is complete").
This is also related to results of Ivanov and Farb–Handel: If $\Gamma$ is a finite index subgroup of either a mapping class group of a punctured surface genus $\ge 2$ or any surface of genus $\ge 3$, or the automorphism group of a free group of rank $\ge 4$, then every automorphism of $\Gamma$ is induced by conjugation by something in the ambient group.