Agentset AI Agent

by agentset-ai• 2.1k•• Scanned•Claim this listing•Request removal
Data Science & MLagentic ragaiai agentsai sdkchatbots

The open-source RAG platform: built-in citations, deep research, 22+ file formats, partitions, MCP server, and more.

Agentset is an open-source ai agent by agentset-ai, written mainly in TypeScript, with 2,119 GitHub stars and the MIT license. Its code was last updated Oct 28, 2026.

Scan summary: scanned Nov 5, 2026 at commit d8e34f6. Seen able to connect to the internet. Scan policy

Scanned
Full scan at d8e34f6 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit471 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (107)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @hono/node-server@1.19.9: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-wc8c-qw6v-h7f6
    bun.lock
  • medium
    @isaacs/brace-expansion@5.0.0: 1 known vulnerability
    GHSA-7h2j-956f-4vf2
    bun.lock
  • medium
    @modelcontextprotocol/sdk@1.24.3: 8 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h +3 more
    bun.lock
  • medium
    @modelcontextprotocol/sdk@1.26.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    bun.lock
  • medium
    @trigger.dev/core@4.3.0: 1 known vulnerability
    GHSA-p28v-f755-9qrg
    bun.lock
  • medium
    body-parser@2.2.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4
    bun.lock
  • medium
    body-parser@2.2.2: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    bun.lock
  • medium
    brace-expansion@1.1.11: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    bun.lock
  • medium
    brace-expansion@2.0.1: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    bun.lock
  • medium
    browserslist@4.24.4: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    bun.lock
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    bun.lock
  • medium
    deepmerge-ts@7.1.5: 1 known vulnerability
    GHSA-ggr8-5vv4-36mx
    bun.lock
  • medium
    defu@6.1.4: 1 known vulnerability
    GHSA-737v-mqg7-c878
    bun.lock
  • medium
    dompurify@3.3.1: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    bun.lock
  • medium
    effect@3.18.4: 1 known vulnerability
    GHSA-38f7-945m-qr2g
    bun.lock
  • medium
    engine.io@6.5.5: 2 known vulnerabilities
    GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x
    bun.lock
  • medium
    engine.io@6.6.4: 3 known vulnerabilities
    GHSA-2gc4-cqfq-p2gv, GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x
    bun.lock
  • medium
    express-rate-limit@8.2.1: 1 known vulnerability
    GHSA-46wh-pxpv-q5gq
    bun.lock
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    bun.lock
  • medium
    fflate@0.4.8: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    bun.lock
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    bun.lock
  • medium
    form-data@4.0.4: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    bun.lock
  • medium
    hono@4.11.4: 38 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-5pq2-9x2x-5p6w +33 more
    bun.lock
  • medium
    hono@4.11.9: 35 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-5pq2-9x2x-5p6w +30 more
    bun.lock
  • medium
    ip-address@10.0.1: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    bun.lock
  • medium
    js-yaml@4.1.0: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    bun.lock
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    bun.lock
  • medium
    minimatch@10.1.1: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    bun.lock
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    bun.lock
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    bun.lock
  • medium
    mysql2@3.15.3: 2 known vulnerabilities
    GHSA-3f6p-5ww8-9rcr, GHSA-rgwj-5xj2-c3m3
    bun.lock
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    bun.lock
  • medium
    nanoid@3.3.8: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    bun.lock
  • medium
    nanoid@5.1.5: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    bun.lock
  • medium
    path-to-regexp@8.2.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    bun.lock
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    bun.lock
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    bun.lock
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    rollup@4.52.4: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    bun.lock
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    bun.lock
  • medium
    socket.io-parser@4.2.4: 2 known vulnerabilities
    GHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9
    bun.lock
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    bun.lock
  • medium
    undici@7.16.0: 31 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52 +26 more
    bun.lock
  • medium
    uuid@10.0.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    bun.lock
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    bun.lock
  • medium
    vite@7.1.9: 11 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-93m4-6634-74q7, GHSA-9jrq-w75r-8gcw +6 more
    bun.lock
  • medium
    ws@8.17.1: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    bun.lock
  • medium
    ws@8.18.1: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    bun.lock
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.1.13: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.1.8: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.3.5: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    Install or build failed in a clean environment
    npm error code EUNSUPPORTEDPROTOCOL npm error Unsupported URL Type "catalog:": catalog: npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T19_02_59_116Z-debug-0.log
  • low
    Possible example credential in docs/tests: curl-auth-header
    docs/.cursor/rules/mintlify.mdc:112
  • low
    @ai-sdk/provider-utils@3.0.20: 1 known vulnerability
    GHSA-866g-f22w-33x8
    bun.lock
  • low
    @ai-sdk/provider-utils@3.0.9: 1 known vulnerability
    GHSA-866g-f22w-33x8
    bun.lock
  • low
    @babel/core@7.26.10: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    bun.lock
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    bun.lock
  • low
    @humanfs/node@0.16.6: 1 known vulnerability
    GHSA-p498-v437-472g
    bun.lock
  • low
    @opentelemetry/core@2.0.1: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    bun.lock
  • low
    @opentelemetry/core@2.2.0: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    bun.lock
  • low
    @opentelemetry/core@2.4.0: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    bun.lock
  • low
    @protobufjs/utf8@1.1.0: 1 known vulnerability
    GHSA-q6x5-8v7m-xcrf
    bun.lock
  • low
    @smithy/config-resolver@4.0.1: 1 known vulnerability
    GHSA-6475-r3vj-m8vf
    bun.lock
  • low
    @vitest/mocker@3.2.4: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    bun.lock
  • low
    ai@5.0.44: 1 known vulnerability
    GHSA-rwvc-j5jr-mgvh
    bun.lock
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    bun.lock
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    bun.lock
  • low
    baseline-browser-mapping@2.9.11: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    bun.lock
  • low
    cookie@0.4.2: 1 known vulnerability
    GHSA-pxg6-pf52-xh8x
    bun.lock
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    bun.lock
  • low
    esbuild@0.23.0: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    bun.lock
  • low
    file-type@21.3.0: 2 known vulnerabilities
    GHSA-5v7r-6r5c-r473, GHSA-j47w-4g3g-c36v
    bun.lock
  • low
    glob@11.1.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    katex@0.16.22: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    bun.lock
  • low
    katex@0.16.27: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    bun.lock
  • low
    katex@0.16.47: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    bun.lock
  • low
    mdast-util-to-hast@13.2.0: 1 known vulnerability
    GHSA-4fh9-h7wg-q85m
    bun.lock
  • low
    mermaid@11.16.0: 5 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh
    bun.lock
  • low
    postcss-selector-parser@7.1.1: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    bun.lock
  • low
    qs@6.11.2: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    bun.lock
  • low
    qs@6.14.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    bun.lock
  • low
    qs@6.15.0: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    bun.lock
  • low
    ua-parser-js@2.0.8: 1 known vulnerability
    GHSA-9h5v-pfqq-x599
    bun.lock
  • low
    valibot@1.2.0: 1 known vulnerability
    GHSA-5qjj-4xww-7phc
    bun.lock
  • low
    yaml@2.8.0: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    bun.lock
  • low
    package.json has a postinstall script
    bun run lint:ws
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Agentset alternatives

View more →

Similar ai agents in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Agentset (this page)
agentset-ai
2.1kMITOct 28, 2026Scanned, no flagged issues
Ragflow
infiniflow
93kApache-2.0Oct 31, 2026Scanned, no flagged issues
Cherry Studio
CherryHQ
53kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
PageIndex
VectifyAI
40kMITOct 29, 2026Scanned, no flagged issues
Graphiti
getzep
32kApache-2.0Nov 1, 2026Scanned, no flagged issues
Cua
trycua
31kMITNov 1, 2026Scanned, no flagged issues