Omnigent AI Agent

by omnigent-ai• 11k•• Scanned•Claim this listing•Request removal
Developer Toolsagent frameworkagent governanceagent orchestrationagentsai

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

Omnigent is an open-source ai agent by omnigent-ai, written mainly in Python, with 11,152 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 62474db. Seen able to run shell commands, run dynamic code, read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at 62474db · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanpass
Dependency audit98 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (140)

  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    omnigent/client_tools/coding.py:259
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    omnigent/harnesses/claude_native/status.py:210
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    omnigent/inner/credential_proxy.py:394
  • medium
    undici@8.10.2: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    .github/actions/setup-harness-cli/locks/pi/package-lock.json
  • medium
    @azure/msal-node@5.4.1: 1 known vulnerability
    GHSA-xcx6-jx8p-x3h5
    pnpm-lock.yaml
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    pnpm-lock.yaml
  • medium
    decode-uri-component@0.5.0: 1 known vulnerability
    GHSA-qr28-fpjm-wq7f
    pnpm-lock.yaml
  • medium
    systeminformation@5.33.15: 1 known vulnerability
    GHSA-3f7j-7jwc-fxfj
    pnpm-lock.yaml
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    gix@0.81.0: 4 known vulnerabilities
    GHSA-f26g-jm89-4g65, GHSA-fr8x-3vfx-f45h, GHSA-p3hw-mv63-rf9w, GHSA-pg4w-g64p-qwhj
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    gix-fs@0.19.2: 1 known vulnerability
    GHSA-f89h-2fjh-2r9q
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    gix-pack@0.68.0: 1 known vulnerability
    GHSA-x494-mj8g-cj27
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    hickory-proto@0.25.2: 2 known vulnerabilities
    RUSTSEC-2026-0118, RUSTSEC-2026-0119
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    hickory-resolver@0.25.2: 2 known vulnerabilities
    GHSA-5j98-2g5x-46v6, GHSA-6f2x-v7q7-m7m5
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    quick-xml@0.38.4: 2 known vulnerabilities
    RUSTSEC-2026-0194, RUSTSEC-2026-0195
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    quinn-proto@0.11.16: 5 known vulnerabilities
    RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0341, RUSTSEC-2026-0342
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    rmcp@1.7.0: 4 known vulnerabilities
    GHSA-33f5-2c5q-wgwj, GHSA-9g45-5xwm-f3wc, GHSA-9pj6-vhgr-3mwh, GHSA-c9xm-49cp-xcr9
    tests/codex_parity/sidecar/Cargo.lock
  • medium
    pyasn1@0.6.4: 4 known vulnerabilities
    GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx
    uv.lock
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    web/electron/e2e/desktop_navigation_policy.e2e.js:319
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    web/src/shell/codeViewerHelpers.test.ts:604
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    web/src/shell/htmlCommentBridge.test.ts:102
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    web/src/shell/htmlCommentBridge.test.ts:180
  • low
    Possible example credential in docs/tests: generic-api-key
    .claude/skills/copilot-sdk-e2e-dev/SKILL.md:198
  • low
    Possible example credential in docs/tests: generic-api-key
    deploy/README.md:557
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    examples/mcp-registry/README.md:171
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/cli/test_cli.py:2920
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/e2e/test_claude_native_permission_auth_lapse_e2e.py:54
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/e2e/test_login_accounts_proxy_env.py:47
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/e2e/test_pi_native_html_signin_tool_call_e2e.py:89
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/e2e/test_server_banner_db_url_redaction_e2e.py:54
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/e2e/test_managed_runner_http_auth.py:84
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/e2e_ui/chat/test_queued_message_lifecycle.py:61
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/codex_parity/sidecar/Cargo.lock:3476
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/harnesses/codex_native/test_codex_native_diagnostics.py:197
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/host/test_connect.py:2404
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/onboarding/test_interactive.py:300
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/runtime/test_cursor_spawn_env.py:229
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    tests/runtime/test_antigravity_spawn_env.py:248
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/server/integration/test_account_revocation_processes.py:110
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/runtime/test_subagent_block_notifier.py:269
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/server/integration/test_accounts_auth_e2e.py:196
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/runner/test_app_sessions_native_terminals_autocreate.py:4087
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/server/test_mcp_registry.py:61
  • low
    Possible example credential in docs/tests: generic-api-key
    5 matches in this file
    tests/server/test_account_revocation.py:72
  • low
    Possible example credential in docs/tests: generic-api-key
    17 matches in this file
    tests/server/test_accounts.py:687
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/server/integration/test_scheduled_tasks_routes.py:848
  • low
    Possible example credential in docs/tests: generic-api-key
    7 matches in this file
    tests/stores/test_conversation_store.py:113
  • low
    Possible example credential in docs/tests: generic-api-key
    7 matches in this file
    web/src/shell/NewChatDialog.flow.test.tsx:461
  • low
    minimatch@10.2.6: 2 known vulnerabilities
    GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
    .github/actions/setup-harness-cli/locks/pi/package-lock.json
  • low
    @hono/node-server@1.19.15: 1 known vulnerability
    GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    pnpm-lock.yaml
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    atomic-polyfill@1.0.3: 1 known vulnerability
    RUSTSEC-2023-0089
    tests/codex_parity/sidecar/Cargo.lock
  • low
    basic-toml@0.1.10: 1 known vulnerability
    RUSTSEC-2026-0374
    tests/codex_parity/sidecar/Cargo.lock
  • low
    block-buffer@0.12.0: 1 known vulnerability
    GHSA-qwgh-2vcv-g2f7
    tests/codex_parity/sidecar/Cargo.lock
  • low
    crossbeam-epoch@0.9.18: 1 known vulnerability
    RUSTSEC-2026-0204
    tests/codex_parity/sidecar/Cargo.lock
  • low
    crypto-bigint@0.5.5: 1 known vulnerability
    RUSTSEC-2026-0387
    tests/codex_parity/sidecar/Cargo.lock
  • low
    ctutils@0.4.2: 1 known vulnerability
    RUSTSEC-2026-0385
    tests/codex_parity/sidecar/Cargo.lock
  • low
    derivative@2.2.0: 1 known vulnerability
    RUSTSEC-2024-0388
    tests/codex_parity/sidecar/Cargo.lock
  • low
    event-listener@5.4.1: 1 known vulnerability
    RUSTSEC-2026-0221
    tests/codex_parity/sidecar/Cargo.lock
  • low
    faster-hex@0.10.0: 1 known vulnerability
    RUSTSEC-2026-0306
    tests/codex_parity/sidecar/Cargo.lock
  • low
    fxhash@0.2.1: 1 known vulnerability
    RUSTSEC-2025-0057
    tests/codex_parity/sidecar/Cargo.lock
  • low
    gix-transport@0.55.1: 1 known vulnerability
    GHSA-9857-6mw7-fq2m
    tests/codex_parity/sidecar/Cargo.lock
  • low
    h2@0.4.14: 1 known vulnerability
    RUSTSEC-2026-0258
    tests/codex_parity/sidecar/Cargo.lock
  • low
    jsonwebtoken@9.3.1: 1 known vulnerability
    GHSA-h395-gr6q-cpjc
    tests/codex_parity/sidecar/Cargo.lock
  • low
    libz-sys@1.1.29: 1 known vulnerability
    RUSTSEC-2026-0418
    tests/codex_parity/sidecar/Cargo.lock
  • low
    lru@0.16.4: 1 known vulnerability
    RUSTSEC-2026-0253
    tests/codex_parity/sidecar/Cargo.lock
  • low
    memmap2@0.9.10: 1 known vulnerability
    RUSTSEC-2026-0186
    tests/codex_parity/sidecar/Cargo.lock
  • low
    opentelemetry_sdk@0.31.0: 1 known vulnerability
    GHSA-w9wp-h8wv-79jx
    tests/codex_parity/sidecar/Cargo.lock
  • low
    paste@1.0.15: 1 known vulnerability
    RUSTSEC-2024-0436
    tests/codex_parity/sidecar/Cargo.lock
  • low
    pin-utils@0.1.0: 1 known vulnerability
    RUSTSEC-2026-0441
    tests/codex_parity/sidecar/Cargo.lock
  • low
    proc-macro-error2@2.0.1: 1 known vulnerability
    RUSTSEC-2026-0173
    tests/codex_parity/sidecar/Cargo.lock
  • low
    rustls@0.23.40: 4 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    tests/codex_parity/sidecar/Cargo.lock
  • low
    rustls-webpki@0.103.13: 1 known vulnerability
    RUSTSEC-2026-0382
    tests/codex_parity/sidecar/Cargo.lock
  • low
    tar@0.4.45: 1 known vulnerability
    GHSA-3pv8-6f4r-ffg2
    tests/codex_parity/sidecar/Cargo.lock
  • low
    unsafe-libyaml@0.2.11: 1 known vulnerability
    RUSTSEC-2024-0449
    tests/codex_parity/sidecar/Cargo.lock
  • low
    webbrowser@1.2.1: 1 known vulnerability
    RUSTSEC-2026-0257
    tests/codex_parity/sidecar/Cargo.lock
  • low
    webpki-root-certs@1.0.7: 1 known vulnerability
    RUSTSEC-2026-0383
    tests/codex_parity/sidecar/Cargo.lock
  • low
    webpki-roots@1.0.7: 1 known vulnerability
    RUSTSEC-2026-0381
    tests/codex_parity/sidecar/Cargo.lock
  • low
    zbus_names@3.0.0: 1 known vulnerability
    RUSTSEC-2026-0371
    tests/codex_parity/sidecar/Cargo.lock
  • low
    zstd@0.13.3: 1 known vulnerability
    RUSTSEC-2026-0391
    tests/codex_parity/sidecar/Cargo.lock
  • low
    zstd-safe@7.2.4: 12 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +7 more
    tests/codex_parity/sidecar/Cargo.lock
  • low
    zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerability
    RUSTSEC-2026-0410
    tests/codex_parity/sidecar/Cargo.lock
  • low
    zvariant@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0370
    tests/codex_parity/sidecar/Cargo.lock
  • low
    zvariant_derive@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0372
    tests/codex_parity/sidecar/Cargo.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
github.comregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Omnigent alternatives

View more →

Similar ai agents in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Omnigent (this page)
omnigent-ai
11kApache-2.0Nov 1, 2026Scanned, no flagged issues
Deepseek Harness
deepseek-ai
268kMITOct 30, 2026Scanned, no flagged issues
Ponytail
DietrichGebert
182kMITOct 29, 2026Scanned, no flagged issues
Orca
stablyai
112kMITNov 1, 2026Scanned, no flagged issues
Deer Flow
bytedance
85kMITNov 1, 2026Scanned, no flagged issues
Ruflo
ruvnet
80kMITNov 1, 2026Scanned, no flagged issues