open-kritt: Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security

by Kritt-ai · Agent Tool · ★ 2.3k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install open-kritt

git clone https://github.com/Kritt-ai/open-kritt

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 69/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

aiai-agentsai-securitybug-bountybugbounty-toolscode-securityhackenproofhackeroneimmunefisecurity-automation

Quick Facts

Stars2,325
Forks402
LanguageJavaScript
CategoryAgent Tool
LicenseAGPL-3.0
Quality Score69/100
Open Issues35
Last Updated2026-10-22
Created2026-07-20
Platformsnode
Est. Tokens~14k

About open-kritt

open·kritt Orchestrate AI agents to find real vulnerabilities in code. An open-source, self-hosted security and vulnerability research platform that turns focused AI analysis into de-duplicated, ranked findings with configurable validation and enrichment.

Compatible Skills

These tools work well together with open-kritt for enhanced workflows:

  • numasec — semantic(0.46)+complementary+rare_topics+similar_pop+shared_platform (65%)
  • ship-safe — semantic(0.35)+complementary+same_lang+similar_pop+shared_platform (62%)
  • communitytools — semantic(0.47)+complementary+rare_topics+similar_pop (61%)
  • reconmap — semantic(0.46)+rare_topics+same_lang+similar_pop+shared_platform (60%)

open-kritt alternative? Top 6 similar tools

Looking for a open-kritt alternative? If you're comparing open-kritt with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • Agentic-Bug-Hunter by awarexone · ⭐ 5.4k

    AI-powered bug bounty hunting toolkit that works with or without subscription.

  • pentest-ai-agents by 0xSteph · ⭐ 2.3k

    Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized pene

  • Claude-BugHunter by elementalsouls · ⭐ 5.3k

    A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disc

  • claude-bug-bounty by shuvonsec · ⭐ 4.4k

    AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report ge

  • CyberStrike by CyberStrikeus · ⭐ 1.9k

    Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models,

  • numasec by FrancescoStabile · ⭐ 811

    The AI Agent for Cyber Security.

More Agent Tool Tools

Explore other popular agent tool tools:

View all Agent Tool tools →

Popular JavaScript Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Agent Tool tools