GPT All Star AI Agent
by kyaukyuai🤖 AI-powered code generation tool for scratch development of web applications with a team collaboration of autonomous AI agents.
GPT All Star is an open-source ai agent by kyaukyuai, written mainly in Python, with 238 GitHub stars and the MIT license. Its code was last updated Oct 29, 2026.
Scan summary: scanned Nov 5, 2026 at commit cc9336f. Seen able to run shell commands, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
cc9336f · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit369 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (47)
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
gpt_all_star/core/agents/copilot.py:103 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
gpt_all_star/core/tools/shell_tool.py:125 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@44.0.0: 7 known vulnerabilitiesPYSEC-2026-1284, PYSEC-2026-2141, PYSEC-2026-35, PYSEC-2026-3552, PYSEC-2026-3553 +2 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2024.12.0: 1 known vulnerabilityPYSEC-2026-4217
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain@0.3.21: 2 known vulnerabilitiesPYSEC-2026-2192, PYSEC-2026-2555
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain-community@0.3.15: 1 known vulnerabilityPYSEC-2026-1515
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain-text-splitters@0.3.7: 2 known vulnerabilitiesPYSEC-2026-1520, PYSEC-2026-77
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-checkpoint@2.0.10: 3 known vulnerabilitiesPYSEC-2026-1527, PYSEC-2026-2573, PYSEC-2026-2574
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.1.51: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.3.1: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.llama-index-core@0.12.25: 6 known vulnerabilitiesPYSEC-2026-1558, PYSEC-2026-1559, PYSEC-2026-1560, PYSEC-2026-1561, PYSEC-2026-1562 +1 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown@3.7: 1 known vulnerabilityPYSEC-2026-89
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.msgpack@1.1.0: 2 known vulnerabilitiesPYSEC-2026-3625, GHSA-j586-36cw-2gc2
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.10.15: 1 known vulnerabilityPYSEC-2026-107
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pymdown-extensions@10.14.1: 4 known vulnerabilitiesPYSEC-2026-1825, PYSEC-2026-2999, PYSEC-2026-3609, PYSEC-2026-3654
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pypdf@5.2.0: 67 known vulnerabilitiesPYSEC-2026-1827, PYSEC-2026-1828, PYSEC-2026-1829, PYSEC-2026-1830, PYSEC-2026-1831 +62 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.6: 4 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.45.3: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.3.0: 8 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +3 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.29.1: 20 known vulnerabilitiesPYSEC-2026-2009, PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014 +15 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmenterror: Failed to parse metadata from built wheel cause: TOML parse error at line 66, column 2 | 66 | [project.scripts] | ^^^^^^^ `pyproject.toml` is using the `[project]` table, but the required `project.name` field is not set
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesreleases.astral.sh
- lowLow. Minor, or common in normal tools. Shown for information.filelock@3.17.0: 4 known vulnerabilitiesPYSEC-2026-1374, PYSEC-2026-1375, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.10: 1 known vulnerabilityPYSEC-2026-215
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.jinja2@3.1.5: 1 known vulnerabilityPYSEC-2026-1471
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-anthropic@0.3.7: 1 known vulnerabilityPYSEC-2026-2556
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-openai@0.3.6: 1 known vulnerabilityPYSEC-2026-76
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.marshmallow@3.26.0: 1 known vulnerabilityPYSEC-2026-1605
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.mkdocs-material@9.6.9: 1 known vulnerabilityPYSEC-2026-3864
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.1: 1 known vulnerabilityPYSEC-2026-2987
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.pynacl@1.5.0: 1 known vulnerabilityPYSEC-2026-3002
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.3.5: 1 known vulnerabilityPYSEC-2026-1845
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.0.1: 1 known vulnerabilityPYSEC-2026-2270
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.3: 2 known vulnerabilitiesPYSEC-2026-1872, PYSEC-2026-2275
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
releases.astral.sh
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
GPT All Star alternatives
View more →Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| GPT All Star (this page) kyaukyuai | 238 | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| AutoGPT Significant-Gravitas | 188k | None found | Nov 1, 2026 | Not scanned yet |
| Langchain langchain-ai | 149k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Gemini CLI google-gemini | 109k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MetaGPT FoundationAgents | 71k | MIT | Jan 21, 2026 | Scanned, no flagged issues |
| Oh My Openagent code-yeongyu | 71k | None found | Nov 1, 2026 | Not scanned yet |