29 results for “AI agents”

REA (rea-agents) is an MIT-licensed toolkit that exposes native-binary, JavaScript/Electron, .NET assembly and website analysis to AI agents via MCP, and also as a local CLI. It drives Hopper, Ghidra, IDA, objdump or Rizin for disassembly and pseudocode, recovers modules and Electron IPC boundaries from ASAR/JS apps, and returns findings with evidence and limitations. Showcases include reconstructing a x86 audio helper into byte-matching C and tracing an Electron clipboard API through preload and IPC; the README also carries lawful-use and licensing guidance.

github.comrepoAdded 14 Oct 2026🛡️ Security

iran-mcp is an open-source catalog of 39 MCP servers (488 tools) that let AI agents query Iranian websites such as Digikala, Torob, Divar, Snappfood, Jabama, Paziresh24, TSETMC and qavanin.ir, with prices normalised to Toman. Most servers are unofficial, read-only Python packages run with uvx; three are official hosted servers. It ships Claude Code plugins, Agent Skills, bundles, proxy lists and a machine-readable servers.json.

github.comrepoAdded 24 Oct 2026, published 11 Oct 2026🧠 AI

awesome-reverse-engineering is a CC0 curated list of reverse-engineering tools and learning resources, organized by task: triage, native analysis, debuggers, instrumentation, deobfuscation, malware analysis, mobile, firmware, file formats, games, diffing, symbolic execution, lifting and AI agents. Each entry notes licensing, maintenance status and prerequisites. It also covers MCP integrations, CTF practice sites and related awesome lists.

github.comrepoAdded 27 Oct 2026, published 9 Oct 2026🛡️ Security

bigarrow is an MIT-licensed, single-binary Swift macOS CLI that draws a click-through arrow and sign over all windows so an AI agent can show a human where to click, paste or act (permission prompts, 2FA, OAuth consent). It ships an Agent Skills package (installed via `bigarrow install-skill`) for Claude Code and Codex, with JSON output and exit codes, and can target by Accessibility label, coordinates, window or Peekaboo snapshot. The README documents the skill's token cost (182 tokens for the description, 1,398 for the instructions) and 104 automated tests.

github.comrepoPublished and added 9 Oct 2026🧠 AI

OpenChart is an open-source TradingView-style desktop charting app (Electron, Node.js/Bun, Effect runtime) that embeds AI agents into statistical/technical analysis, real-time market alerts and agentic opportunity research. It ships a custom DSL called Tea (inspired by TradingView's Pine Script) for writing indicators, and a conversation interface built on assistant-ui and the AG-UI event protocol so users converse with agents while charting.

github.comrepoPublished and added 6 Oct 2026🧠 AI

OpenShell is NVIDIA's open-source runtime for safely running fleets of autonomous AI agents: each agent runs in an isolated sandbox where kernel-level controls enforce a declared policy over file access, syscalls, and network connections, and credentials are injected only for approved endpoints rather than exposed to the agent directly. Policy changes are checked with formal verification to flag risky new access (new hosts, new API methods) before they're approved, and the project ships a CLI, gateway, Kubernetes/Helm deployment, and a tutorial running OpenCode against an OpenRouter model.

github.comrepoAdded 1 Oct 2026🛡️ Security

OpenShell is NVIDIA's open-source runtime for running fleets of autonomous AI agents inside isolated sandboxes. Declarative policies cover filesystem, syscall, process and network access. These are enforced at the kernel level, and credentials are injected only into requests bound for approved endpoints. Policy changes are checked with formal verification so risky new access waits for human review. It ships a CLI, a gateway control plane (Helm deployment on Kubernetes), SDKs, extensibility hooks (middleware, interceptors, compute drivers) and installable agent skills, and it can run agents such as OpenCode.

github.comrepoAdded 1 Oct 2026🧠 AI

OpenShell is NVIDIA's open-source runtime for running fleets of autonomous AI agents with restricted, policy-governed access to files, system calls, network, and credentials. It enforces policy at the kernel level inside isolated sandboxes (per-agent, with Docker/Podman/virtualization backends) and uses formal verification to flag risky policy changes — such as an agent gaining a new host or API access with credentials — before they take effect, so changes can wait for human review. It ships a CLI, a gateway control plane, Kubernetes/Helm deployment, and installable agent skills for writing and debugging sandbox policies.

github.comrepoAdded 29 Sep 2026🧠 AI

OpenShell is NVIDIA's open-source runtime for running fleets of autonomous AI agents in isolated sandboxes, enforcing per-agent policies on filesystem, syscall, and network access at the kernel level and injecting credentials only for approved endpoints. Policy changes go through a formal-verification step (an 'advisor'/'prover') that flags newly granted risky access, such as a new host reachable with credentials, before it's applied, and it deploys via Docker/Podman/host virtualization or Kubernetes with Helm.

github.comrepoAdded 29 Sep 2026🛡️ Security

Paper2Agent is a multi-agent AI system that coordinates parallel specialist agents to transform a research paper and its code repository into a tested MCP server exposing the paper's methods as callable tools ('agentified' papers). It ships as a skill for coding agents like Claude Code and Codex, and the project demonstrates the pipeline on real papers (TISSUE for spatial transcriptomics, Scanpy for single-cell analysis, AlphaGenome for genomic variant interpretation), each producing a hosted MCP server that a chat agent can call to run the paper's actual scientific workflows.

github.comrepoAdded 27 Sep 2026🧠 AI

Recat is a local, Bun-based web workspace for reviewing security findings, including ones produced by AI agents such as Hermes, Codex and Claude Code. It reads a folder of finding.json, README and PoC evidence per project, and offers a dashboard by severity, status and asset coverage (web, smart contract, mobile, desktop, network, hardware). It also has filters by vulnerability class, an evidence viewer, JSON and ZIP exports, password-protected access with a censored view, and a SKILL.md reporting skill that lets agents write findings straight to the source folder.

github.comrepoAdded 16 Oct 2026, published 27 Sep 2026🛡️ Security

Sno Station is an open-source (Apache-2.0) local workstation that coordinates multiple AI agents (Claude Code, Codex, OpenClaw) as a 'Duo': they share an encrypted on-disk memory store, hand off tasks when one hits a rate limit, peer-review each other's work, and run a nightly self-improvement loop that proposes edits to their own skill files based on session history. It reports results on the Memora benchmark (FAMA/FAA metrics for forgetting-aware long-term memory) and cites Karpathy's 'LLM Wiki' and Google's WikiSkill as design inspirations.

github.comrepoAdded 26 Sep 2026, published 19 Sep 2026🧠 AI

A GitHub-hosted, CC0-licensed index of 281 public writeups on attacks against AI agents, organized into six categories: indirect prompt injection, direct prompt injection/jailbreaks/guardrail bypass, MCP and agent tooling, AI platform/infrastructure bugs, classic web bugs in AI product surfaces, and AI used as an attacker's tool. Entries span 2021-2026 and include major disclosures like GeminiJack, ForcedLeak, Clinejection, CVE-2025-53773 (GitHub Copilot RCE), and dozens of Johann Rehberger/PromptArmor/qual1a writeups covering exfiltration, MCP OAuth flaws, and coding-agent sandbox escapes. Comes with an accompanying blog post "How to Hack AI Agents" and a scripted links.txt for automation.

github.comrepoAdded 22 Sep 2026, published 17 Sep 2026🛡️ Security

Headroom is an open-source (Apache 2.0) local compression layer that sits between AI agents and LLM providers, compressing tool outputs, logs, RAG chunks, files and conversation history before they reach the model. It offers a Python/TypeScript library, a drop-in proxy, an `headroom wrap` mode for popular coding agents (Claude Code, Codex, Cursor, Copilot, Aider, etc.), an MCP server, cross-agent shared memory with dedup, and output-token reduction via verbosity steering and effort routing — all running locally with reversible compression (CCR) so originals stay retrievable.

github.comrepoAdded 23 Sep 2026, published 7 Sep 2026🧠 AI

endpoint-ai-agent-abuse (EAA) is a curated, evidence-scoped taxonomy of techniques for abusing local, endpoint-resident AI agents — especially coding and developer agents — covering launchers/flags, provider routing, instructions, memory, hooks, plugins, skills, MCP, transcripts, telemetry, and inherited local-user authority. Each technique is tagged by maturity (feasible, demonstrated, observed) and backed by cited incidents, artifacts, or research, with companion files for surfaces, tactics, case mappings, and detection/hunting hypotheses plus a validator script and JSON schema for the catalog.

github.comrepoPublished and added 7 Sep 2026🛡️ Security

A curated GitHub corpus tracking real-world security incidents, CVEs, attack techniques, and defensive tools specific to autonomous AI agents — spanning prompt injection/goal hijacking, MCP client-side tool-metadata poisoning, the "Promptware Kill Chain" multi-stage attack model, MITRE ATLAS agentic techniques, and the OWASP Top 10 for Agentic Applications. It also documents the OpenClaw/ClawHub supply-chain incident (1,184 malicious skills confirmed by Antiy CERT) and links defensive projects like OWASP Agent Memory Guard for LangChain/LlamaIndex agent memory protection.

github.comrepoAdded 3 Sep 2026🛡️ Security

A curated, CC0-licensed GitHub list cataloguing open-source AI agent platforms across five categories: persistent AI coworkers (Agent Zero, Agenta, LibreChat, LobeChat, Open WebUI, OpenClaw), developer agent frameworks (CrewAI, LangGraph, LlamaIndex, Haystack, Langflow, Letta, Agno, Pydantic AI, OpenAI Agents SDK), workflow/automation runtimes (n8n, Temporal, Prefect, Dagster, Apache Airflow, Windmill), browser agents (Browser Use, Skyvern), and coding agents (Aider, Cline, Goose, OpenHands, Open Interpreter). Each entry states a factual one-line description plus its license and hosting model, with selection criteria requiring an active repo, a usable product, and verifiable licensing — companion comparison table hosted at aiagentplatforms.dev.

github.comrepoAdded 30 Sep 2026, published 2 Sep 2026🧠 AI

AnythingLLM is an open-source, MIT-licensed all-in-one LLM application from Mintplex Labs that lets users chat with their documents, run no-code AI agents, and connect to a wide range of LLM providers, embedders, vector databases, and TTS/STT services. It ships as a monorepo (frontend, server, collector, embed widget, browser extension) with multi-user permissioning, MCP compatibility, scheduled tasks, dynamic model routing, and both self-hosted (Docker) and desktop (Mac/Windows/Linux) deployment options.

github.comrepoAdded 23 Sep 2026, published 31 Aug 2026🧠 AI

Cloudflare Computer is a preview virtual filesystem living inside a Durable Object, with authoritative state in SQLite exposed through three pluggable execution backends: a full Linux container mounted via FUSE and capnweb RPC, an isolated shell (just-bash) running in a Dynamic Worker, and isolated JavaScript modules in a fresh Dynamic Worker with scoped fs/git/artifacts access. It's designed as sandboxing infrastructure for AI agents, with examples demonstrating per-backend egress policy controls (none/all/custom) and MCP-based code execution tools, making it relevant to securely isolating and constraining agent/LLM code execution.

github.comrepoAdded 3 Sep 2026, published 25 Aug 2026🛡️ Security

ADR (Agentic AI Detection and Response) is Uber's open-source enterprise security system for AI agents, covering discovery of unsanctioned AI tools on endpoints, telemetry capture of agent intent/tool-use/execution traces, a benchmark (ADR-Bench: 300+ tasks, 134 MCP servers, 17 agent attack techniques), and a dual-agent detector for risky agent behavior. It is deployed in production at Uber to secure employee-facing coding agents (Cursor, Claude Code, Codex, GitHub Copilot CLI, DeepSeek) and customer-facing support agents; the accompanying paper was accepted to MLSys 2026. The prevention component and offline red-teaming engine (ADR Explorer) are not included in the open-source release.

github.comrepoPublished and added 21 Aug 2026🛡️ Security

Cumora is a cross-platform team-chat application where AI agents sit alongside humans as first-class participants — holding persistent personas and memory, claiming Kanban work, coordinating with each other, and sending real email — rather than only responding when addressed. Agents can run on Cumora's cloud (per-agent Kubernetes pods driving a multi-hop tool-calling loop over the OpenAI Responses API) or in "Bring Your Own Agent" mode, pairing a local Mac/VPS daemon with an existing coding-agent backend (Claude Code, Codex, Cursor Agent, Gemini CLI, OpenCode, Qwen Code, Google Antigravity, etc.) while keeping provider keys off the server. The repo documents a concrete coordination design — a seen-cursor freshness gate that holds stale replies, atomic claims on units of work, a small-brain triage gate, and a transactional Postgres outbox for realtime fan-out — making it a useful reference for building multi-agent systems that avoid agents colliding on shared work.

github.comrepoAdded 30 Sep 2026, published 17 Aug 2026🧠 AI

AuditSentry is a GitHub project that pairs Claude Code with 13 specialized MCP servers and 23 parallel AI agents to audit Solidity and Vyper smart contracts, generating vulnerability findings, working exploit PoCs, mainnet-fork simulations, and CVSS-scored audit reports. It targets DeFi-specific bug classes (reentrancy, oracle manipulation, flash loan attacks, ERC-4626 inflation, cross-chain messaging replay, L2 sequencer issues, ERC-4337 account abstraction) and claims results benchmarked against 150+ historical Code4rena/Sherlock contest findings.

github.comrepoAdded 3 Sep 2026, published 10 Aug 2026🛡️ Security

jit is a macOS (Apple Silicon) tool that moves plaintext secrets from .env files, ~/.aws/credentials, shell exports, .npmrc, and MCP configs into a Touch ID-gated local encrypted vault, leaving decoy files on disk and injecting real values only into the specific process that requests them via execve, native credential-helper protocols (AWS credential_process, docker/git credential helpers), or ephemeral named-pipe (FIFO) mounts. It adds per-process consent prompts naming the requesting tool/agent, time-bounded "process grants" for unattended AI agents (e.g. Claude, Codex) to use credentials overnight, and a durable audit log of every credential read, unlock, and denial. It explicitly targets the risk that AI coding agents and CLIs run with full user permissions and can read plaintext secrets, treating agent MCP configs and wrapped AI CLIs as first-class.

github.comrepoPublished and added 18 Jul 2026🛡️ Security

HackAgent is an open-source Python SDK and CLI for testing the security of AI agents, automating research-backed attacks (e.g. jailbreaks, prompt injection) to surface vulnerabilities before exploitation. It runs locally with no API key required (SQLite-backed results and a built-in dashboard), supports an optional cloud reporting mode, and can drive browser-based agents via Playwright for WEB-provider targets. The project is Apache-2.0 licensed and framed explicitly for authorized security testing and coordinated disclosure.

github.comrepoPublished and added 10 Jul 2026🛡️ Security

HexStrike AI is an MCP server that exposes 150+ security tools (Nmap, sqlmap, Ghidra, Metasploit/MSFVenom, Trivy, Nuclei, TruffleHog, etc.) to MCP-compatible AI agents like Claude, GPT, or Copilot, letting them autonomously plan and execute network, web, binary, cloud, and CTF assessments. It ships 12+ specialized agents (BugBounty, CTF Solver, CVE Intelligence, Exploit Generator) that handle tool selection, parameter optimization, and attack-chain discovery, effectively turning an LLM into an autonomous pentest operator. The README includes explicit authorized-use guidance (pentests, bug bounty, CTF, red team) and warnings about the tool's broad system access.

github.comrepoAdded 18 Jun 2026🛡️ Security

bb-huge is an open-source MCP server + agent skill ("/bb-huge") plus a Flask/SQLite portal that gives AI coding agents (Claude Code, Gemini CLI, Codex, etc.) persistent memory and a disciplined bug-bounty hunting methodology across web, mobile, binary, and source-code targets. It implements an observation → hypothesis → finding promotion pipeline with evidence provenance, ships 350+ curated community security skills, 35+ MCP tools for CRUD on findings/programs/recon/assets, and includes an install script for the ProjectDiscovery/tomnomnom recon toolkit (subfinder, httpx, nuclei, ffuf, etc.). It's aimed at bug bounty hunters wanting to solve the "context resets every session" problem when working with AI agents.

github.comrepoPublished and added 5 Jun 2026🛡️ Security

Sim is an open-source (Apache 2.0) workspace for building, deploying and managing AI agents and workflows, offering a visual flow editor, 1,000+ integrations (Slack, Notion, HubSpot, Salesforce), knowledge base ingestion, and support for every major LLM plus local models via Ollama and vLLM. It ships as a cloud service (sim.ai), a desktop app, or a self-hosted Docker/Kubernetes deployment set up via an npx sim-setup wizard, and is built on Next.js, Bun, PostgreSQL/Drizzle, and ReactFlow.

github.comrepoAdded 22 Sep 2026, published 13 May 2026🧠 AI

Mirage is an open-source virtual terminal and filesystem for AI agents that mounts services like S3, Slack, Redis and Gmail under one POSIX-like root and virtualizes CLIs and runtimes. It provides agent-focused security controls: allow/ask/deny profiles for commands, hide/show rules for files, a scriptable policy engine that gates every filesystem operation and session write, and credential resolution via AWS Secrets Manager, 1Password and Auth0. The goal is fine-grained control over what an AI agent can execute and see, reducing the blast radius of agent tool use.

github.comrepoAdded 3 Sep 2026, published 8 May 2026🛡️ Security

IronCurtain is a research-prototype runtime that constrains autonomous AI agents (Claude Code, Goose, or its own builtin agent) by compiling a human-written "constitution" into deterministic policy rules enforced on every MCP tool call. It treats the LLM as untrusted, mediating all filesystem/git/network/API access through a policy engine (allow/deny/escalate), a V8 isolate sandbox for its builtin agent, and a network-isolated Docker mode with a TLS-terminating MITM proxy for external agent tools. It also ships multi-agent workflow orchestration (e.g., a vulnerability-discovery pipeline with libFuzzer/AFL++ fuzzing gates) with human approval checkpoints.

github.comrepoPublished and added 7 May 2026🛡️ Security