No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by sourcebot-dev · Agent Tool · ★ 3.9k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is sourcebot safe to install? View the security audit →
Self Host · Public Demo Docs · Roadmap · Report Bug · Feature Request · Changelog <img src="https://img.shields.io/github/stars/so
| Stars | 3,947 |
| Forks | 373 |
| Language | TypeScript |
| Category | Agent Tool |
| Quality Score | 66.1587825838909/100 |
| Open Issues | 122 |
| Last Updated | 2026-09-22 |
| Created | 2024-08-23 |
| Platforms | node |
| Est. Tokens | ~15k |
These tools work well together with sourcebot for enhanced workflows:
Looking for a sourcebot alternative? If you're comparing sourcebot with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Give Claude Code, Cursor, Codex CLI a ChatGPT for your codebase. Multi-agent knowledge engine, grounded Q&A wi
MCP server for semantic code research and context generation on real-time using LLM patterns | Search naturall
Code search MCP for Claude Code. Make entire codebase the context for any coding agent.
Exa MCP for web search and web crawling!
A super light-weight embedded code search engine CLI (AST based) that just works - improves speed and efficie
Cut AI token costs 95%+ on code exploration. The leading MCP server for precise, symbol-level GitHub code retr
Explore other popular agent tool tools:
sourcebot is Sourcebot is a self-hosted tool that helps humans and agents understand your codebase.. It is categorized as a Agent Tool with 3.9k GitHub stars.
sourcebot is primarily written in TypeScript. It covers topics such as code-intelligence, code-search, fair-source.
You can find installation instructions and usage details in the sourcebot GitHub repository at github.com/sourcebot-dev/sourcebot. The project has 3.9k stars and 373 forks, indicating an active community.
The top alternatives to sourcebot on Agent Skills Hub include antigravity-workspace-template, octocode-mcp, claude-context. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: