Hexabot — security grade SAFE, quality 66/100

Security audit verdict: SAFE · quality 66/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by Hexastack · Agent Tool · ★ 944

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is Hexabot safe to install? View the security audit →

About Hexabot

Automate the Boring, Keep the Magic Build and run agentic workflows across channels with YAML, tools, MCP, memory and RAG. Website · Documentation · Extensions · Discord Hexabot v3 is an automation platform with first-class AI capabilities, combining workflows, actions, and conversational channels in one runtime. Quick Start Prerequisites Node.js One package manager (, , , or ) Docker (optional, for Docker-based services) This Quick Start targets projects generated with the CLI. If you are contributing to the Hexabot monorepo itself, use PNPM (see CONTRIBUTING.md). 1) Install the CLI Or run the CLI without a global install: 2) Create and run a project

agentagenticagentsaiai-automationartificial-intelligenceautomationbot-frameworkchatbotchatgpt

Quick Facts

Stars944
Forks215
LanguageTypeScript
CategoryAgent Tool
Quality Score66.1441669242001/100
Open Issues16
Last Updated2026-05-05
Created2024-09-09
Platformsclaude-code, gemini, node
Est. Tokens~3580k

Compatible Skills

These tools work well together with Hexabot for enhanced workflows:

  • voltagent — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (56%)
  • volcano-agent-sdk — semantic(0.22)+complementary+same_lang+similar_pop+shared_platform (53%)
  • c4-genai-suite — semantic(0.21)+complementary+same_lang+similar_pop+shared_platform (52%)
  • dialoqbase — semantic(0.18)+complementary+same_lang+similar_pop+shared_platform (51%)
  • swarmclaw — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (51%)

Hexabot alternative? Top 6 similar tools

Looking for a Hexabot alternative? If you're comparing Hexabot with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • Hexabot by hexabot-ai · ⭐ 1.2k

    Hexabot v3 is an AI workflow automation platform, combining workflows, actions, agents, and conversational cha

  • py-gpt by szczyglis-dev · ⭐ 2.0k

    Desktop AI Assistant powered by GPT-6, GPT-5, Gemini, Claude, Grok, Ollama, DeepSeek, Perplexity, and more - c

  • better-chatbot by cgoinglove · ⭐ 1.1k

    Just a Better Chatbot. Powered by Agent & MCP & Workflows.

  • casibase by casibase · ⭐ 4.5k

    ⚡️AI Cloud OS: Open-source enterprise-level AI knowledge base and MCP (model-context-protocol)/A2A (agent-to-a

  • gptme by gptme · ⭐ 4.4k

    Your agent in your terminal, equipped with local tools: writes code, uses the terminal, browses the web. Make

  • maid by Mobile-Artificial-Intelligence · ⭐ 2.7k

    Maid is a free and open source application for interfacing with llama.cpp models locally, and with Anthropic,

More Agent Tool Tools

Explore other popular agent tool tools:

View all Agent Tool tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is Hexabot?

Hexabot is Hexabot v3 is an AI automation platform, combining workflows, actions, agents, and conversational channels in one runtime.. It is categorized as a Agent Tool with 944 GitHub stars.

What programming language is Hexabot written in?

Hexabot is primarily written in TypeScript. It covers topics such as agent, agentic, agents.

How do I install or use Hexabot?

You can find installation instructions and usage details in the Hexabot GitHub repository at github.com/Hexastack/Hexabot. The project has 944 stars and 215 forks, indicating an active community.

What are the best alternatives to Hexabot?

The top alternatives to Hexabot on Agent Skills Hub include Hexabot, py-gpt, better-chatbot. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Agent Tool tools