DocsGPT AI Agent

by arc53• 18k•• Scanned•Claim this listing•Request removal
Research & Analysisagent builderagentsaichatgptdocsgpt

Private AI platform for agents, assistants and enterprise search. Built-in Agent Builder, Deep research, Document analysis, Multi-model support, and API connectivity for agents.

DocsGPT is an open-source ai agent by arc53, written mainly in Python, with 18,352 GitHub stars and the MIT license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 86cd5ee. Seen able to run dynamic code, connect to the internet. Scan policy

Scanned
Full scan at 86cd5ee · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit19 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (44)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    nbconvert@7.9.2: 4 known vulnerabilities
    PYSEC-2026-1691, PYSEC-2026-2229, PYSEC-2026-2230, GHSA-pjvx-prjx-h659
    deployment/sandbox/requirements.txt
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    docs/package-lock.json
  • medium
    Install contacted hosts other than package registries
    releases.astral.sh
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    frontend/src/backgroundJobs/serviceWorker.test.ts:34
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/upload/website.test.ts:23
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/upload/website.test.ts:23
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/upload/website.test.ts:24
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/upload/website.test.ts:24
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/upload/website.test.ts:65
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/upload/website.test.ts:66
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    docs/content/API/openai-compatible.mdx:34
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/QA_TESTS.md:60
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/agents/test_mcp_tool.py:120
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/api/user/agents/test_roles_access.py:95
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/api/user/agents/test_routes_happy.py:1638
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/api/user/sources/test_chunks.py:914
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/agents/tools/test_mcp_tool.py:283
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/api/user/test_artifacts_routes.py:1284
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/api/v1/test_v1_idempotency.py:172
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/fixtures/decisions/release.json:8
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    tests/connectors/test_policies_and_attribution.py:241
  • low
    Possible example credential in docs/tests: jwt
    tests/guardrails/test_redaction_boundaries.py:29
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/e2e/specs/tier-a/tools.spec.ts:43
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/storage/db/repositories/test_personal_access_tokens.py:191
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/storage/db/repositories/test_message_events_repository.py:587
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/monitors/test_trigger_routes.py:419
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/storage/db/repositories/test_user_custom_models.py:174
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/monitors/test_signatures.py:165
  • low
    Possible example credential in docs/tests: stripe-access-token
    tests/monitors/test_signatures.py:247
  • low
    Possible example credential in docs/tests: private-key
    2 matches in this file
    tests/guardrails/test_checks.py:104
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_target_coverage.py:210
  • low
    idna@3.9.0: 1 known vulnerability
    PYSEC-2026-215
    deployment/sandbox/requirements.txt
  • low
    minimatch@10.2.6: 2 known vulnerabilities
    GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
    extensions/react-widget/package-lock.json
  • low
    pytest@8.0.0: 1 known vulnerability
    PYSEC-2026-1845
    tests/requirements.txt
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
files.pythonhosted.orgpypi.orgreleases.astral.sh
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

DocsGPT alternatives

View more →

Similar ai agents in Research & Analysis, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
DocsGPT (this page)
arc53
18kMITNov 1, 2026Scanned, no flagged issues
Hermes Agent
NousResearch
259kMITNov 1, 2026Scanned, no flagged issues
Anything LLM
Mintplex-Labs
68kMITOct 30, 2026Scanned, no flagged issues
Khazix Skills
KKKKhazix
22kMITOct 1, 2026Scanned, no flagged issues
Hermes Webui
nesquena
19kMITNov 1, 2026Scanned, no flagged issues
AI Berkshire
xbtlin
17kMITNov 1, 2026Scanned, no flagged issues