Cersei AI Agent

by pacifio• 461•• Scanned•Claim this listing•Request removal
Coding Agentsagentantrophicclaude codecodexcoding agent

The Rust SDK for building coding agents. Tools, streaming, graph, sub-agent orchestration, MCP — as composable functions

Cersei is an open-source ai agent by pacifio, written mainly in Rust, with 461 GitHub stars and the MIT license. Its code was last updated Aug 6, 2026.

Scan summary: scanned Nov 5, 2026 at commit 708c505. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at 708c505 · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanfail
Dependency audit646 known vulnerabilitiesfail
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (92)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    agno@2.5.17: 1 known vulnerability
    PYSEC-2026-2333
    bench/general-agents/uv.lock
  • medium
    aiohttp@3.13.5: 44 known vulnerabilities
    PYSEC-2026-2104, PYSEC-2026-2105, PYSEC-2026-2106, PYSEC-2026-2107, PYSEC-2026-2108 +39 more
    bench/general-agents/uv.lock
  • medium
    cryptography@46.0.7: 8 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf, PYSEC-2026-3552 +3 more
    bench/general-agents/uv.lock
  • medium
    dnspython@2.8.0: 1 known vulnerability
    GHSA-45c3-73f7-pv4m
    bench/general-agents/uv.lock
  • medium
    filelock@3.28.0: 9 known vulnerabilities
    GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
    bench/general-agents/uv.lock
  • medium
    fsspec@2026.3.0: 1 known vulnerability
    PYSEC-2026-4217
    bench/general-agents/uv.lock
  • medium
    json-repair@0.25.3: 1 known vulnerability
    GHSA-xf7x-x43h-rpqh
    bench/general-agents/uv.lock
  • medium
    langchain-core@1.3.0: 1 known vulnerability
    PYSEC-2026-2564
    bench/general-agents/uv.lock
  • medium
    langgraph-sdk@0.3.13: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    bench/general-agents/uv.lock
  • medium
    langsmith@0.7.32: 2 known vulnerabilities
    PYSEC-2026-2582, GHSA-f4xh-w4cj-qxq8
    bench/general-agents/uv.lock
  • medium
    mcp@1.26.0: 7 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    bench/general-agents/uv.lock
  • medium
    oauthlib@3.3.1: 8 known vulnerabilities
    PYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c, PYSEC-2026-4113 +3 more
    bench/general-agents/uv.lock
  • medium
    pyasn1@0.6.3: 7 known vulnerabilities
    PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +2 more
    bench/general-agents/uv.lock
  • medium
    pydantic-ai@1.22.0: 3 known vulnerabilities
    PYSEC-2026-2976, PYSEC-2026-4274, PYSEC-2026-4275
    bench/general-agents/uv.lock
  • medium
    pydantic-ai-slim@1.22.0: 3 known vulnerabilities
    PYSEC-2026-2980, PYSEC-2026-4283, PYSEC-2026-4284
    bench/general-agents/uv.lock
  • medium
    python-multipart@0.0.26: 10 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3039, PYSEC-2026-3040, PYSEC-2026-3041 +5 more
    bench/general-agents/uv.lock
  • medium
    starlette@1.0.0: 10 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +5 more
    bench/general-agents/uv.lock
  • medium
    urllib3@2.6.3: 10 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +5 more
    bench/general-agents/uv.lock
  • medium
    filelock@3.25.2: 9 known vulnerabilities
    GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
    bench/term-bench/uv.lock
  • medium
    fsspec@2026.2.0: 1 known vulnerability
    PYSEC-2026-4217
    bench/term-bench/uv.lock
  • medium
    mcp@1.27.0: 7 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    bench/term-bench/uv.lock
  • medium
    @fastify/busboy@2.1.1: 4 known vulnerabilities
    GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
    docs/bun.lock
  • medium
    basic-ftp@5.3.0: 2 known vulnerabilities
    GHSA-c475-qrg2-pj4r, GHSA-rpmf-866q-6p89
    docs/bun.lock
  • medium
    brace-expansion@1.1.14: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    docs/bun.lock
  • medium
    brace-expansion@5.0.5: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    docs/bun.lock
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    docs/bun.lock
  • medium
    image-size@2.0.2: 4 known vulnerabilities
    GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr, GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
    docs/bun.lock
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    docs/bun.lock
  • medium
    js-yaml@4.1.1: 8 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-2883-xcg3-v3hh +3 more
    docs/bun.lock
  • medium
    minimatch@10.1.1: 8 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
    docs/bun.lock
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    docs/bun.lock
  • medium
    path-to-regexp@6.1.0: 2 known vulnerabilities
    GHSA-9wv6-86v2-598j, GHSA-9wv6-86v2-598j
    docs/bun.lock
  • medium
    path-to-regexp@8.2.0: 4 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f, GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    docs/bun.lock
  • medium
    path-to-regexp@8.3.0: 4 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f, GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    docs/bun.lock
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    docs/bun.lock
  • medium
    postcss@8.5.8: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    docs/bun.lock
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    docs/bun.lock
  • medium
    smol-toml@1.5.2: 6 known vulnerabilities
    GHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2, GHSA-v3rj-xjv7-4jmq, GHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2 +1 more
    docs/bun.lock
  • medium
    source-map-js@1.2.1: 2 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    docs/bun.lock
  • medium
    undici@5.28.4: 36 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +31 more
    docs/bun.lock
  • medium
    undici@6.25.0: 15 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-8xcm-r25x-g524 +10 more
    docs/bun.lock
  • medium
    undici@7.25.0: 29 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3xpg-4rpp-hhhm +24 more
    docs/bun.lock
  • medium
    zod@3.22.4: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    docs/bun.lock
  • medium
    zod@3.24.4: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    docs/bun.lock
  • medium
    zod@4.1.11: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    docs/bun.lock
  • medium
    zod@4.3.6: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    docs/bun.lock
  • medium
    basic-ftp@5.3.1: 1 known vulnerability
    GHSA-c475-qrg2-pj4r
    docs/package-lock.json
  • medium
    brace-expansion@1.1.18: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    docs/package-lock.json
  • medium
    brace-expansion@5.0.9: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    docs/package-lock.json
  • medium
    nanoid@3.3.17: 1 known vulnerability
    GHSA-2v37-7h3g-55p8
    docs/package-lock.json
  • medium
    sharp@0.35.3: 2 known vulnerabilities
    GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    docs/package-lock.json
  • medium
    undici@5.29.0: 16 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +11 more
    docs/package-lock.json
  • medium
    undici@6.28.0: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm +3 more
    docs/package-lock.json
  • medium
    undici@7.29.0: 18 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +13 more
    docs/package-lock.json
  • low
    fastmcp@3.2.4: 1 known vulnerability
    GHSA-7xgj-8392-5q4r
    bench/general-agents/uv.lock
  • low
    h2@4.3.0: 2 known vulnerabilities
    PYSEC-2026-3628, PYSEC-2026-3628
    bench/general-agents/uv.lock
  • low
    hpack@4.1.0: 2 known vulnerabilities
    PYSEC-2026-4053, PYSEC-2026-4053
    bench/general-agents/uv.lock
  • low
    idna@3.11: 2 known vulnerabilities
    PYSEC-2026-215, PYSEC-2026-215
    bench/general-agents/uv.lock
  • low
    langgraph-checkpoint@4.0.2: 1 known vulnerability
    PYSEC-2026-2573
    bench/general-agents/uv.lock
  • low
    multidict@6.7.1: 2 known vulnerabilities
    PYSEC-2026-4244, PYSEC-2026-4244
    bench/general-agents/uv.lock
  • low
    opentelemetry-api@1.34.1: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    bench/general-agents/uv.lock
  • low
    python-dotenv@1.1.1: 1 known vulnerability
    PYSEC-2026-2270
    bench/general-agents/uv.lock
  • low
    datasets@4.8.4: 1 known vulnerability
    PYSEC-2026-3716
    bench/term-bench/uv.lock
  • low
    opentelemetry-api@1.41.0: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    bench/term-bench/uv.lock
  • low
    pydantic-settings@2.13.1: 1 known vulnerability
    GHSA-4xgf-cpjx-pc3j
    bench/term-bench/uv.lock
  • low
    @tootallnate/once@2.0.0: 2 known vulnerabilities
    GHSA-vpq2-c234-7xj6, GHSA-vpq2-c234-7xj6
    docs/bun.lock
  • low
    ajv@8.6.3: 2 known vulnerabilities
    GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
    docs/bun.lock
  • low
    baseline-browser-mapping@2.10.13: 2 known vulnerabilities
    GHSA-w5vr-8v7q-w6rv, GHSA-w5vr-8v7q-w6rv
    docs/bun.lock
  • low
    esbuild@0.27.5: 2 known vulnerabilities
    GHSA-g7r4-m6w7-qqqr, GHSA-g7r4-m6w7-qqqr
    docs/bun.lock
  • low
    glob@13.0.6: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
    docs/bun.lock
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    docs/bun.lock
  • low
    postcss-selector-parser@7.1.1: 4 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    docs/bun.lock
  • low
    sandbox@2.5.6: 2 known vulnerabilities
    GHSA-fm4j-4xhm-xpwx, GHSA-gc25-3vc5-2jf9
    docs/bun.lock
  • low
    srvx@0.8.9: 1 known vulnerability
    GHSA-p36q-q72m-gchr
    docs/bun.lock
  • low
    ip-address@10.4.0: 5 known vulnerabilities
    GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5
    docs/package-lock.json
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    docs/package-lock.json
  • low
    sandbox@3.4.0: 2 known vulnerabilities
    GHSA-fm4j-4xhm-xpwx, GHSA-gc25-3vc5-2jf9
    docs/package-lock.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Cersei alternatives

View more →

Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Cersei (this page)
pacifio
461MITAug 6, 2026Scanned, no flagged issues
AutoGPT
Significant-Gravitas
188kNone foundNov 1, 2026Not scanned yet
Langchain
langchain-ai
149kMITNov 1, 2026Scanned, no flagged issues
Gemini CLI
google-gemini
109kApache-2.0Nov 1, 2026Scanned, no flagged issues
MetaGPT
FoundationAgents
71kMITJan 21, 2026Scanned, no flagged issues
Oh My Openagent
code-yeongyu
71kNone foundNov 1, 2026Not scanned yet