9router AI Agent

by decolua• 32k•• Scanned•Claim this listing•Request removal
Coding Agentsai agentsai gatewayanthropicchatgptclaude

Unlimited FREE AI coding. Connect Claude Code, Codex, Cursor, Cline, Copilot, Antigravity to FREE Claude/GPT/Gemini via 40+ providers. Auto-fallback, RTK -40% tokens, never hit limits.

9router is an open-source ai agent by decolua, written mainly in JavaScript, with 31,786 GitHub stars and the MIT license. Its code was last updated Oct 28, 2026.

Scan summary: scanned Nov 5, 2026 at commit 1fe586b. Seen able to run shell commands, run dynamic code, read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at 1fe586b · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit0 known vulnerabilitiespass
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (157)

  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:221
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:245
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:254
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:287
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:313
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:344
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:346
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:391
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:393
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:397
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:401
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:404
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:421
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:430
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:438
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:444
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/cli.js:538
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/scripts/build-cli.js:174
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/scripts/build-cli.js:327
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/scripts/build-cli.js:339
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/tray/autostart.js:92
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/tray/autostart.js:129
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/tray/autostart.js:206
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/tray/autostart.js:209
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/tray/autostart.js:227
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/tray/tray.js:319
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/utils/clipboard.js:13
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/utils/clipboard.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/utils/clipboard.js:19
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    cli/src/cli/utils/clipboard.js:21
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    open-sse/utils/proxyFetch.js:244
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/app/api/cli-tools/antigravity-mitm/route.js:51
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/app/api/tunnel/tailscale-install/route.js:14
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:26
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:27
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:31
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:48
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:69
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:78
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:147
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/appUpdater.js:149
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/headroom/detect.js:54
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/headroom/detect.js:95
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/pxpipe/install.js:37
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/cloudflare/cloudflared.js:173
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/cloudflare/cloudflared.js:413
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/cloudflare/cloudflared.js:415
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:211
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:246
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:291
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:354
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:506
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:508
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:516
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:539
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:545
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:566
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:575
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:579
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:628
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:746
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:841
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:847
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/lib/tunnel/tailscale/tailscale.js:850
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/cert/install.js:53
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/cert/install.js:58
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/cert/install.js:77
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/cert/install.js:222
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/dns/dnsConfig.js:44
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/dns/dnsConfig.js:54
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/dns/dnsConfig.js:245
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/dns/dnsConfig.js:247
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/dns/dnsConfig.js:249
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:105
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:108
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:113
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:141
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:147
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:149
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:292
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:296
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:303
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:307
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:338
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/mitm/manager.js:350
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:456
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:464
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:664
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:672
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:778
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:801
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/manager.js:806
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/mitm/server.js:164
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/mitm/server.js:197
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/mitm/server.js:259
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/server.js:352
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/server.js:356
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/server.js:363
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/winElevated.js:12
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/winElevated.js:43
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/mitm/winElevated.js:64
  • medium
    Install contacted hosts other than package registries
    fonts.googleapis.com, fonts.gstatic.com, telemetry.nextjs.org
  • low
    Possible example credential in docs/tests: curl-auth-header
    docs/CODEX_STT.md:6
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/en/features/combos.md:433
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/es/features/combos.md:383
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/ja/getting-started/installation.md:149
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/en/getting-started/installation.md:149
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/ja/features/combos.md:383
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/ja/troubleshooting.md:246
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/ja/integration/other-tools.md:92
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/en/troubleshooting.md:246
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/es/integration/other-tools.md:92
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/es/troubleshooting.md:246
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/es/getting-started/installation.md:149
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/vi/features/combos.md:383
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/vi/integration/other-tools.md:92
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/zh-CN/troubleshooting.md:246
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/vi/getting-started/installation.md:149
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/vi/troubleshooting.md:246
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    gitbook/content/zh-CN/getting-started/installation.md:149
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/en/integration/other-tools.md:92
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/zh-CN/features/combos.md:383
  • low
    Possible example credential in docs/tests: curl-auth-header
    gitbook/content/zh-CN/integration/other-tools.md:92
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    tests/__baseline__/providers-baseline.json:52
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/unit/antigravity-oauth-client.test.js:6
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/embeddings.cloud.test.js:70
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/glm-oauth.test.js:19
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/tokenharbor-provider.test.js:56
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
fonts.googleapis.comfonts.gstatic.comgithub.comregistry.npmjs.orgrelease-assets.githubusercontent.comtelemetry.nextjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

9router alternatives

View more →

Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
9router (this page)
decolua
32kMITOct 28, 2026Scanned, no flagged issues
AutoGPT
Significant-Gravitas
188kNone foundNov 1, 2026Not scanned yet
Langchain
langchain-ai
149kMITNov 1, 2026Scanned, no flagged issues
Gemini CLI
google-gemini
109kApache-2.0Nov 1, 2026Scanned, no flagged issues
MetaGPT
FoundationAgents
71kMITJan 21, 2026Scanned, no flagged issues
Oh My Openagent
code-yeongyu
71kNone foundNov 1, 2026Not scanned yet