Knowledge Agent Template

by vercel-labs• 1.1k•• Scanned•Claim this listing•Request removal
Coding Agentsagentsai agentchatbotfile systemknowledge base

Open source file-system and knowledge based agent template. Build AI agents that stay up to date with your knowledge base

Knowledge Agent Template is an open-source ai agent by vercel-labs, written mainly in TypeScript, with 1,074 GitHub stars and the MIT license. Its code was last updated Sep 15, 2026.

Scan summary: scanned Nov 5, 2026 at commit 814711f. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at 814711f · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanpass
Dependency audit419 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (101)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @hono/node-server@1.19.9: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-wc8c-qw6v-h7f6
    bun.lock
  • medium
    @nuxtjs/mdc@0.20.1: 1 known vulnerability
    GHSA-mxm6-v9r6-r94c
    bun.lock
  • medium
    @tiptap/core@3.19.0: 2 known vulnerabilities
    GHSA-cp6q-959q-f8rh, GHSA-j95f-988m-3j2f
    bun.lock
  • medium
    @vue/server-renderer@3.5.28: 1 known vulnerability
    GHSA-g2v6-rqmx-r4w6
    bun.lock
  • medium
    body-parser@1.20.4: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    bun.lock
  • medium
    brace-expansion@5.0.2: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg +3 more
    bun.lock
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    bun.lock
  • medium
    deepmerge-ts@7.1.5: 1 known vulnerability
    GHSA-ggr8-5vv4-36mx
    bun.lock
  • medium
    defu@6.1.4: 1 known vulnerability
    GHSA-737v-mqg7-c878
    bun.lock
  • medium
    devalue@5.6.2: 11 known vulnerabilities
    GHSA-33hq-fvwr-56pm, GHSA-4q55-j62x-fr9h, GHSA-8qm3-746x-r74r, GHSA-9rgm-9g3h-6x36, GHSA-cfw5-2vxh-hr84 +6 more
    bun.lock
  • medium
    devalue@5.6.3: 10 known vulnerabilities
    GHSA-4q55-j62x-fr9h, GHSA-77vg-94rm-hx3p, GHSA-9rgm-9g3h-6x36, GHSA-cfw5-2vxh-hr84, GHSA-hx4r-w6wj-j8fg +5 more
    bun.lock
  • medium
    drizzle-orm@0.41.0: 1 known vulnerability
    GHSA-gpj5-g38j-94v9
    bun.lock
  • medium
    drizzle-orm@0.45.1: 1 known vulnerability
    GHSA-gpj5-g38j-94v9
    bun.lock
  • medium
    effect@3.18.4: 1 known vulnerability
    GHSA-38f7-945m-qr2g
    bun.lock
  • medium
    fast-xml-builder@1.1.4: 1 known vulnerability
    GHSA-5wm8-gmm8-39j9
    bun.lock
  • medium
    fflate@0.8.2: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    bun.lock
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    bun.lock
  • medium
    h3@1.15.5: 4 known vulnerabilities
    GHSA-22cc-p3c6-wpvm, GHSA-4hxc-9384-m385, GHSA-72gr-qfp7-vwhw, GHSA-wr4h-v87w-p3r7
    bun.lock
  • medium
    hono@4.11.4: 38 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-5pq2-9x2x-5p6w +33 more
    bun.lock
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    bun.lock
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    bun.lock
  • medium
    kysely@0.28.11: 3 known vulnerabilities
    GHSA-8cpq-38p9-67gx, GHSA-pv5w-4p9q-p3v2, GHSA-wmrf-hv6w-mr66
    bun.lock
  • medium
    launch-editor@2.12.0: 4 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
    bun.lock
  • medium
    linkify-it@5.0.0: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    bun.lock
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    bun.lock
  • medium
    lodash@4.17.23: 2 known vulnerabilities
    GHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
    bun.lock
  • medium
    lodash-es@4.17.23: 2 known vulnerabilities
    GHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
    bun.lock
  • medium
    markdown-it@14.1.1: 5 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
    bun.lock
  • medium
    minimatch@10.2.1: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    bun.lock
  • medium
    mysql2@3.15.3: 2 known vulnerabilities
    GHSA-3f6p-5ww8-9rcr, GHSA-rgwj-5xj2-c3m3
    bun.lock
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    bun.lock
  • medium
    nanoid@5.1.6: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-xwg4-73v4-xw9w
    bun.lock
  • medium
    node-forge@1.3.3: 15 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p +10 more
    bun.lock
  • medium
    nuxt@4.3.1: 17 known vulnerabilities
    GHSA-48hr-524c-v5w3, GHSA-534h-c3cw-v3h9, GHSA-6gq8-jgmh-3ffp, GHSA-934w-87qh-qr26, GHSA-9473-5f9j-94wq +12 more
    bun.lock
  • medium
    path-to-regexp@0.1.12: 1 known vulnerability
    GHSA-37ch-88jc-xwx2
    bun.lock
  • medium
    path-to-regexp@8.3.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    bun.lock
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    bun.lock
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    bun.lock
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    prosemirror-view@1.41.6: 1 known vulnerability
    GHSA-c8x8-7fp4-3x9w
    bun.lock
  • medium
    rollup@4.57.1: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    bun.lock
  • medium
    serialize-javascript@6.0.2: 3 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
    bun.lock
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    bun.lock
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    bun.lock
  • medium
    svgo@4.0.0: 4 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
    bun.lock
  • medium
    undici@6.21.3: 19 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-4qv8-2p9j-2685 +14 more
    bun.lock
  • medium
    undici@6.23.0: 19 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-4qv8-2p9j-2685 +14 more
    bun.lock
  • medium
    undici@7.22.0: 32 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52 +27 more
    bun.lock
  • medium
    vite@7.3.1: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    bun.lock
  • medium
    ws@8.19.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    bun.lock
  • medium
    zod@3.24.4: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.1.11: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    Install or build failed in a clean environment
    n incorrect (and potentially broken) dependency resolution. npm error npm error npm error For a full report see: npm error /tmp/home/.npm/_logs/2026-11-05T19_49_34_960Z-eresolve-report.txt npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T19_49_34_960Z-debug-0.log
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    apps/app/app/content/docs/api-keys.md:27
  • low
    @ai-sdk/provider-utils@4.0.15: 1 known vulnerability
    GHSA-866g-f22w-33x8
    bun.lock
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    bun.lock
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    bun.lock
  • low
    @nestjs/core@11.1.13: 1 known vulnerability
    GHSA-36xv-jgw5-4q75
    bun.lock
  • low
    @nuxt/nitro-server@4.3.1: 3 known vulnerabilities
    GHSA-g8wj-3cr3-6w7v, GHSA-hg3f-28rg-4jxj, GHSA-vjh5-4x84-xrqp
    bun.lock
  • low
    @nuxt/ui@4.4.0: 1 known vulnerability
    GHSA-gj2h-2fpw-fhv9
    bun.lock
  • low
    @nuxt/vite-builder@4.3.1: 1 known vulnerability
    GHSA-648h-gw55-m2g7
    bun.lock
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    bun.lock
  • low
    baseline-browser-mapping@2.9.19: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    bun.lock
  • low
    colord@2.9.3: 1 known vulnerability
    GHSA-2wm5-q62r-hmrv
    bun.lock
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    bun.lock
  • low
    esbuild@0.18.20: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    bun.lock
  • low
    esbuild@0.27.3: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    bun.lock
  • low
    fast-xml-parser@5.5.8: 1 known vulnerability
    GHSA-gh4j-gqv2-49f6
    bun.lock
  • low
    file-type@20.5.0: 2 known vulnerabilities
    GHSA-5v7r-6r5c-r473, GHSA-j47w-4g3g-c36v
    bun.lock
  • low
    file-type@21.3.0: 2 known vulnerabilities
    GHSA-5v7r-6r5c-r473, GHSA-j47w-4g3g-c36v
    bun.lock
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    glob@13.0.4: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    nitropack@2.13.1: 2 known vulnerabilities
    GHSA-5w89-w975-hf9q, GHSA-9phm-9p8f-hw5m
    bun.lock
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    bun.lock
  • low
    postcss-selector-parser@7.1.1: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    bun.lock
  • low
    protocol-buffers-schema@3.6.0: 1 known vulnerability
    GHSA-j452-xhg8-qg39
    bun.lock
  • low
    qs@6.14.2: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    bun.lock
  • low
    qs@6.15.0: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    bun.lock
  • low
    srvx@0.11.5: 1 known vulnerability
    GHSA-p36q-q72m-gchr
    bun.lock
  • low
    unhead@2.1.4: 3 known vulnerabilities
    GHSA-5339-hvwr-7582, GHSA-95h2-gj7x-gx9w, GHSA-g5xx-pwrp-g3fv
    bun.lock
  • low
    valibot@1.2.0: 1 known vulnerability
    GHSA-5qjj-4xww-7phc
    bun.lock
  • low
    yaml@1.10.2: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    bun.lock
  • low
    yaml@2.8.2: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    bun.lock
  • low
    yauzl@3.2.0: 1 known vulnerability
    GHSA-gmq8-994r-jv83
    bun.lock
  • low
    package.json has a prepare script
    turbo run build --filter='./packages/*'
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Knowledge Agent Template alternatives

View more →

Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Knowledge Agent Template (this page)
vercel-labs
1.1kMITSep 15, 2026Scanned, no flagged issues
AutoGPT
Significant-Gravitas
188kNone foundNov 1, 2026Not scanned yet
Langchain
langchain-ai
149kMITNov 1, 2026Scanned, no flagged issues
Gemini CLI
google-gemini
109kApache-2.0Nov 1, 2026Scanned, no flagged issues
MetaGPT
FoundationAgents
71kMITJan 21, 2026Scanned, no flagged issues
Oh My Openagent
code-yeongyu
71kNone foundNov 1, 2026Not scanned yet