Strix

Codex Security is an OpenAI CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in authorized code repositories. It scans directories and codebases, including repository changes, uses AI-assisted analysis to trace attack paths and apply custom threat models, validates findings, and can generate reviewable patches and exports in SARIF, JSON, and CSV formats. The CLI supports CI use with an API key and can stop builds at a selected severity threshold. The package also supports configurable deep scans, worker and subagent counts, time limits, containerized bulk scans, and a preview findings service. The service stores findings and embeddings in SQLite, provides paginated listings and a read-only dashboard, identifies potential duplicates through embedding similarity, and allows completed findings to be published and deduplicated through the CLI or SDK. It requires Node.js 22.13.0 or later and Python 3.10 or later, and can use OpenAI or other documented inference providers.

sloptrim is a local prose linter and coding-agent plugin that detects patterns associated with AI-generated writing when an agent saves a document. It extracts prose from supported text and office formats, scores it on a 0–100 scale, and reports suspicious spans for revision; it analyzes writing patterns rather than determining authorship and does not process code. The command-line tool uses Python's standard library, requires no model or network connection, and keeps text on the local machine. It integrates with Claude Code and can be initialized for other agents through an agent contract and editor-rule files.

PentAGI is a self-hosted, AI-powered penetration-testing platform for security professionals, researchers, and ethical hackers. It uses a multi-agent system with specialized researcher, developer, executor, adviser, planner, and reflector roles to investigate targets, plan and execute testing tasks, operate professional security tools, and generate vulnerability reports. The platform runs operations in isolated Docker containers and includes more than 20 security tools, an isolated web scraper, external search integrations, PostgreSQL with pgvector for persistent results and semantic memory, and an optional Graphiti/Neo4j knowledge graph. Its agents use long-term, working, and episodic memory; chain summarization converts conversation chains into a structured ChainAST, summarizes older sections and oversized pairs, and rebuilds the chain when the result is smaller. Optional execution monitoring detects repeated or excessive tool calls and invokes a mentor for alternative strategies, while task planning decomposes a request into actionable subtasks before specialist agents execute it. PentAGI provides a React and TypeScript web interface, Go-based REST and GraphQL APIs with Bearer-token authentication, flow-scoped file management, Markdown and PDF report downloads, and monitoring integrations built around OpenTelemetry, Grafana, VictoriaMetrics, Jaeger, and Loki. It supports multiple hosted and local LLM providers, including OpenAI, Anthropic, Google Gemini, AWS Bedrock, Ollama, DeepSeek, GLM, Kimi, Qwen, and MiniMax, and can be deployed with Docker Compose or Podman. The project states that it is an autonomous and assistant-guided penetration-testing platform rather than a CALDERA-style breach-and-attack-simulation system with predefined campaigns; testing should be limited to systems for which the operator has authorization.