X postMiaTool
Agentic security tooling that moves beyond static alerts to validate vulnerabilities and build working PoCs helps teams cut through noise and address exploitable flaws more quickly.
By combining vulnerability discovery with active validation, VulnHunter attempts to bridge the gap between static code findings and verified exploitability. Its interoperability with Cyber-Frost Harness offers a modular approach to agent skills, although community feedback emphasizes the need for tightly scoped rules to avoid consuming excessive CI minutes on false positives.
Mia
@MiaAI_lab · 5 October 2026
This is awesome 🔥 AI security scanner that: - Analyzes source code just like an attacker - Validates security flaws - Suggests fixes Great addition to open-source! t.co/Ej0cG0Poeu
218 likes3 replies229 bookmarks18k views
View on XSummary generated by AI (Gemini 3.8 Flash, 6 October 2026). It may contain errors – the original source is authoritative.
Similar in content, found by the AI search.
Repository:nealbridges/VulnHunter
VulnHunter is an open-source, agentic AI security scanner that inspects source code from an attacker's perspective, confirms exploitability, and generates fixes. This maintained fork of Capital One's original project decouples the tool from Claude Code to support arbitrary agent harnesses and open-weight models.
223starsPython
X post:Brais Moure
Brais Moure highlights the release of Cloudflare's 'security-audit-skill'. The tool turns coding agents into multi-phase security auditors and served as the foundation for Cloudflare's internal vulnerability discovery harness.
3.4kbookmarks139.4kviews
Repository:snyk/agent-scan
Agent Scan is an open-source security tool from Snyk that discovers and scans local AI agent components, MCP servers, and skills for prompt injections and vulnerabilities.
3.1kstarsPython
Repository:cloudflare/security-audit-skill
Cloudflare's security-audit-skill is an open-source coding-agent workflow that orchestrates multi-phase security audits with independently verified, machine-readable findings.
5.2kstarsJavaScript
Repository:bex-co/bex-security
Bex Security is an open-source, upstream-first fork of OpenAI Codex Security that brings vulnerability detection, validation, and remediation to multiple coding agents via the Agent Client Protocol (ACP).
51starsTypeScript
Repository:NVIDIA/SkillSpector
SkillSpector is an open-source security scanner from NVIDIA designed to inspect extensions and skills for AI agents (such as Claude Code, Codex CLI, and MCP) for vulnerabilities and malicious patterns before installation.
15.9kstarsPython
Parts of this content were created with the assistance of AI.
