by larlarua · Agent Tool · ★ 1.4k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/larlarua/AutoCVE.gitTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 1,428 |
| Forks | 134 |
| Language | Python |
| Category | Agent Tool |
| License | AGPL-3.0 |
| Quality Score | 62/100 |
| Open Issues | 14 |
| Last Updated | 2026-10-01 |
| Created | 2026-06-15 |
| Platforms | python |
| Est. Tokens | ~17k |
AutoCVE - 一键挖掘 CVE，筛项目、审源码、验漏洞、出报告，全流程自动化 📚 项目文档 · ✨ 核心能力 · 🚀 快速开始 · 🏆 CVE 成果 简体中文 | English 📚 项目文档 📖 用户使用手册 涵盖环境部署、模型配置、项目导入、Agent 审计、一键 CVE、漏洞管理和 Skills 管理完整使用说明，并提供各功能界面预览。 🏗️ 架构设计文档 介绍 AutoCVE 的整体架构、Agent 工作流、工具编排、权限保护、Agent Runtime 以及 ReAct Loop 状态机设计。 🔌 接口文档 提供后端 API、数据结构、请求参数及接口调试说明。 ✨ 核心能力 🚀 一键完成 CVE 挖掘 实现从项目筛选、仓库导入、审计任务创建、Agent 漏洞挖掘到 CVE 申报报告生成的全流程自动化。用户仅需复制报告内容并提交，即可完成后续 CVE 申请。...
These tools work well together with AutoCVE for enhanced workflows:
Looking for a AutoCVE alternative? If you're comparing AutoCVE with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autono
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models,
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions
The open-source AI security harness. Includes a web interface for code analysis, pentesting, vulnerability res
The world's first open-source AI-native vector design tool and the first to feature concurrent Agent Teams. De
Explore other popular agent tool tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: