Rakazo AI Agent

by elie222• 6.5k•• Scanned•Claim this listing•Request removal
Data Science & MLai agentschatgptdockerelectronexpo

Open-source Grok Bot alternative. Choose your own model and sandbox.

Rakazo is an open-source ai agent by elie222, written mainly in TypeScript, with 6,511 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 8c68ff3. Seen able to run dynamic code, read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at 8c68ff3 · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit95 known vulnerabilitieswarn
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (184)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @xmldom/xmldom@0.8.14: 8 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59, GHSA-8344-3jmq-59r6, GHSA-93r5-fhx6-vmg9 +3 more
    pnpm-lock.yaml
  • medium
    @xmldom/xmldom@0.9.11: 11 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-3px3-54cx-rmw9, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59, GHSA-6mj3-qw4j-hgrw +6 more
    pnpm-lock.yaml
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.18: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    pnpm-lock.yaml
  • medium
    brace-expansion@2.1.4: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    pnpm-lock.yaml
  • medium
    brace-expansion@5.0.9: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    pnpm-lock.yaml
  • medium
    compression@1.8.1: 1 known vulnerability
    GHSA-vc2v-76pw-4v95
    pnpm-lock.yaml
  • medium
    decode-uri-component@0.2.2: 2 known vulnerabilities
    GHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
    pnpm-lock.yaml
  • medium
    devalue@5.9.0: 8 known vulnerabilities
    GHSA-4q55-j62x-fr9h, GHSA-9rgm-9g3h-6x36, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32 +3 more
    pnpm-lock.yaml
  • medium
    fast-uri@3.1.5: 10 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf, GHSA-hrr3-gc8f-f4qj +5 more
    pnpm-lock.yaml
  • medium
    follow-redirects@1.16.0: 3 known vulnerabilities
    GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
    pnpm-lock.yaml
  • medium
    js-yaml@4.3.1: 1 known vulnerability
    GHSA-2883-xcg3-v3hh
    pnpm-lock.yaml
  • medium
    markdown-it@14.3.0: 4 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
    pnpm-lock.yaml
  • medium
    node-forge@1.4.0: 12 known vulnerabilities
    GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +7 more
    pnpm-lock.yaml
  • medium
    undici@6.28.0: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm +3 more
    pnpm-lock.yaml
  • medium
    Install contacted hosts other than package registries
    app.rakazo.com, binaries.prisma.sh, checkpoint.prisma.io, rakazo-public.fsn1.your-objectstorage.com, telemetry.astro.build, telemetry.vercel.com
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/ai-consent.test.ts:198
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/ai-consent.test.ts:208
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/bot-secrets-router.test.ts:295
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/bot-secrets-router.test.ts:296
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/bot-secrets-router.test.ts:299
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/bot-secrets-router.test.ts:300
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/integration-catalog.test.ts:135
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/persist-memory-provider-config.test.ts:273
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/persist-memory-provider-config.test.ts:289
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:749
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:754
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:762
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:769
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:794
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:816
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:849
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:852
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:856
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:860
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:880
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:881
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:885
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:886
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:1017
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/api/src/voice.test.ts:1018
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/app-document-state.test.ts:9
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/preload.test.ts:20
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/desktop/src/setup-config.test.ts:50
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/desktop/src/setup-config.test.ts:54
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/desktop/src/setup-config.test.ts:55
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/desktop/src/setup-config.test.ts:57
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/desktop/src/setup-config.test.ts:62
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/desktop/src/setup-config.test.ts:62
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/setup.test.ts:139
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/mobile/lib/endpoint.test.ts:82
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/mobile/lib/endpoint.test.ts:83
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/mobile/lib/endpoint.test.ts:84
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/mobile/lib/endpoint.test.ts:92
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/mobile/lib/endpoint.test.ts:93
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/mobile/lib/mermaid-webview.test.ts:69
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    apps/mobile/lib/page-screen.test.tsx:126
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    apps/mobile/lib/page-screen.test.tsx:161
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/mobile/lib/text-scale.test.ts:122
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/components/SandboxedHtmlViewer.test.tsx:109
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/components/SandboxedHtmlViewer.test.tsx:149
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    apps/web/src/components/pages/PageFrame.test.tsx:115
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    apps/web/src/components/pages/PageFrame.test.tsx:138
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/lib/index-html-theme.test.ts:35
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/novnc-html.test.ts:90
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/novnc-html.test.ts:108
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/novnc-html.test.ts:260
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/web/src/pages/VoiceSettingsOverlay.test.tsx:242
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/web/src/pages/VoiceSettingsOverlay.test.tsx:273
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/web/src/pages/VoiceSettingsOverlay.test.tsx:284
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/web/src/pages/VoiceSettingsOverlay.test.tsx:296
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    apps/web/src/pages/VoiceSettingsOverlay.test.tsx:308
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    infra/sandboxes/computer/test_page_browser.py:2016
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    infra/sandboxes/supervisor/src/home-ownership.test.ts:364
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/bot-secrets.test.ts:776
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/computer-provider-registry.test.ts:56
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/adapters/src/computer-workspace.test.ts:56
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/egress-refusal.test.ts:30
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/favicon.test.ts:178
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/favicon.test.ts:178
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/favicon.test.ts:750
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/favicon.test.ts:781
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/honcho-memory-provider.test.ts:998
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:147
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:226
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:504
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:975
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:1008
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:1060
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:1066
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:1603
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:1976
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/installed-connectors.test.ts:2040
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/keenable-web.test.ts:221
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/mcp-oauth.test.ts:502
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/mcp-oauth.test.ts:1339
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/mcp-oauth.test.ts:1354
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/mcp-oauth.test.ts:1360
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/mcp-oauth.test.ts:1364
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/media-generation-provider.test.ts:186
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/memory-provider-factory.test.ts:79
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/memory-provider-factory.test.ts:174
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/memory-provider-factory.test.ts:196
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-url.test.ts:75
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-url.test.ts:84
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-url.test.ts:86
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-url.test.ts:102
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:27
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:72
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:88
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:186
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:211
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:234
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:284
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:386
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/openai-compatible-voice.test.ts:437
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/parallel-web.test.ts:292
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/pi-usage.test.ts:644
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/remote-mcp.test.ts:68
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/remote-mcp.test.ts:69
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/remote-mcp.test.ts:70
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/remote-mcp.test.ts:176
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/remote-mcp.test.ts:247
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/supermemory-memory-provider.test.ts:154
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/supermemory-memory-provider.test.ts:328
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/adapters/src/web-ssrf.test.ts:21
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/auth/src/passkey.test.ts:22
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/chat-ui/src/markdown.test.ts:231
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/contracts/src/bot-secrets.test.ts:144
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/contracts/src/bot-secrets.test.ts:168
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/contracts/src/bot-secrets.test.ts:169
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/contracts/src/bot-secrets.test.ts:170
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/egress.test.ts:11
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/egress.test.ts:64
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/node/screen-capability.test.ts:261
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/node/screen-capability.test.ts:261
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/node/screen-capability.test.ts:270
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/node/screen-capability.test.ts:271
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/node/screen-capability.test.ts:272
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/core/src/node/screen-capability.test.ts:273
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/page-kit/src/compile.test.ts:7
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/page-kit/src/runtime.test.tsx:36
  • low
    Possible example credential in docs/tests: private-key
    apps/web/e2e/secret-card.spec.ts:188
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    apps/api/src/router.test.ts:5919
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/web/e2e/screen-proxy-isolation.spec.ts:82
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/web/src/api-proxy.test.ts:68
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    apps/web/src/lib/model-connection-preflight.test.ts:206
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/web/src/vite-config.test.ts:34
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/adapters/src/key-provider-conformance.test.ts:165
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/adapters/src/mcp-connector-launch.test.ts:272
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/adapters/src/model-selection.test.ts:178
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/adapters/src/pi-models.test.ts:404
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/adapters/src/workspace-file-tools.test.ts:183
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/adapters/src/user-device-gateway.test.ts:560
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/core/src/events.test.ts:887
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    packages/logging/src/sentry.test.ts:179
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/testkit/src/evals/evals.test.ts:428
  • low
    @vitest/mocker@4.1.11: 2 known vulnerabilities
    GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp
    pnpm-lock.yaml
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    glob@11.1.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    ip-address@10.5.0: 5 known vulnerabilities
    GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5
    pnpm-lock.yaml
  • low
    katex@0.16.47: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    pnpm-lock.yaml
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    qs@6.15.3: 3 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx
    pnpm-lock.yaml
  • low
    smol-toml@1.8.0: 1 known vulnerability
    GHSA-r4xh-jqrq-34v2
    pnpm-lock.yaml
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
api.github.comapp.rakazo.combinaries.prisma.shcheckpoint.prisma.ionodejs.orgrakazo-public.fsn1.your-objectstorage.comregistry.npmjs.orgtelemetry.astro.buildtelemetry.vercel.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Rakazo alternatives

View more →

Similar ai agents in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Rakazo (this page)
elie222
6.5kApache-2.0Nov 1, 2026Scanned, no flagged issues
Ragflow
infiniflow
93kApache-2.0Oct 31, 2026Scanned, no flagged issues
Cherry Studio
CherryHQ
53kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
PageIndex
VectifyAI
40kMITOct 29, 2026Scanned, no flagged issues
Graphiti
getzep
32kApache-2.0Nov 1, 2026Scanned, no flagged issues
Cua
trycua
31kMITNov 1, 2026Scanned, no flagged issues