Taskyon AI Agent
by XyntopiaBrowser based Interface for Generative AI. Chat/Agent/Taskmanager Hybrid.
Taskyon is an open-source ai agent by Xyntopia, written mainly in TypeScript, with 56 GitHub stars and the MIT license. Its code was last updated Oct 25, 2026.
Scan summary: scanned Nov 5, 2026 at commit 2a16f62. Seen able to run dynamic code, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
2a16f62 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit131 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (87)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Contacts a hard-coded IP address instead of a domain name.
packages/common/modules/test_publicChatImport.ts:38 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.102.8: 5 known vulnerabilitiesRUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
packages/https_tunnel_wasm/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.38.3: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
src-tauri/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quinn-proto@0.11.15: 5 known vulnerabilitiesRUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0341, RUSTSEC-2026-0342
src-tauri/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tauri@2.10.3: 1 known vulnerabilityGHSA-7gmj-67g7-phm9
src-tauri/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@azure/msal-node@6.0.1: 1 known vulnerabilityGHSA-xcx6-jx8p-x3h5
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@intlify/core-base@10.0.8: 2 known vulnerabilitiesGHSA-83rm-6c8r-g728, GHSA-8rc2-428q-7ww3
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@intlify/shared@10.0.8: 1 known vulnerabilityGHSA-83rm-6c8r-g728
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.electron@41.10.7: 8 known vulnerabilitiesGHSA-2p8c-gr87-2676, GHSA-3qxv-5xgr-q7w9, GHSA-98mx-cjp9-gchm, GHSA-997q-gvvc-jwmx, GHSA-fw47-9c62-h3vw +3 more
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fflate@0.8.2: 1 known vulnerabilityGHSA-px8p-9vwx-vf98
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.1: 1 known vulnerabilityGHSA-mrwp-f3q8-3g9p
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@6.29.0: 5 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.30.0: 8 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vue-i18n@10.0.8: 2 known vulnerabilitiesGHSA-83rm-6c8r-g728, GHSA-8rc2-428q-7ww3
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.xlsx@0.20.3: 2 known vulnerabilitiesGHSA-4r6h-8v6p-xvw6, GHSA-5pgg-2g8v-p4x9
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmentnts for details. ➤ YN0000: └ Completed ➤ YN0000: ┌ Fetch step ➤ YN0000: └ Completed in 7s 882ms ➤ YN0000: ┌ Link step ➤ YN0001: │ Error: EPERM: operation not permitted, chmod '/w/node_modules/@taskyon/tycli/bin/tycli.cjs' ➤ YN0000: └ Completed in 49s 343ms ➤ YN0000: · Failed with errors in 57s 620ms
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriescdn.sheetjs.com
- lowLow. Minor, or common in normal tools. Shown for information.crypto-bigint@0.5.5: 1 known vulnerabilityRUSTSEC-2026-0387
packages/https_tunnel_wasm/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.paste@1.0.15: 1 known vulnerabilityRUSTSEC-2024-0436
packages/https_tunnel_wasm/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rsa@0.9.10: 1 known vulnerabilityRUSTSEC-2023-0071
packages/https_tunnel_wasm/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.36: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
packages/https_tunnel_wasm/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-webpki@0.103.13: 2 known vulnerabilitiesRUSTSEC-2026-0382, RUSTSEC-2026-0382
packages/https_tunnel_wasm/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-roots@1.0.5: 1 known vulnerabilityRUSTSEC-2026-0381
packages/https_tunnel_wasm/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.100: 1 known vulnerabilityRUSTSEC-2026-0190
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.bytes@1.10.1: 1 known vulnerabilityRUSTSEC-2026-0007
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.fxhash@0.2.1: 1 known vulnerabilityRUSTSEC-2025-0057
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.glib@0.18.5: 1 known vulnerabilityRUSTSEC-2024-0429
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.12: 1 known vulnerabilityRUSTSEC-2026-0258
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.pin-utils@0.1.0: 1 known vulnerabilityRUSTSEC-2026-0441
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.proc-macro-error@1.0.4: 1 known vulnerabilityRUSTSEC-2024-0370
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.7.3: 1 known vulnerabilityRUSTSEC-2026-0097
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.8.5: 1 known vulnerabilityRUSTSEC-2026-0097
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.9.2: 1 known vulnerabilityRUSTSEC-2026-0097
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rkyv@0.7.45: 2 known vulnerabilitiesRUSTSEC-2026-0001, RUSTSEC-2026-0235
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.35: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.serde_with@3.15.0: 1 known vulnerabilityGHSA-7gcf-g7xr-8hxj
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.time@0.3.44: 1 known vulnerabilityRUSTSEC-2026-0009
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.48.0: 1 known vulnerabilityRUSTSEC-2026-0386
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-char-property@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0081
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-char-range@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0075
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-common@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0080
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-ucd-ident@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0100
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-ucd-version@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0098
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-roots@1.0.6: 1 known vulnerabilityRUSTSEC-2026-0381
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zbus_names@3.0.0: 1 known vulnerabilityRUSTSEC-2026-0371
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant@4.2.0: 1 known vulnerabilityRUSTSEC-2026-0370
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant_derive@4.2.0: 1 known vulnerabilityRUSTSEC-2026-0372
src-tauri/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@4.0.8: 1 known vulnerabilityGHSA-866g-f22w-33x8
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.@eslint/plugin-kit@0.3.3: 1 known vulnerabilityGHSA-xffm-g5w8-qvg7
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.6: 1 known vulnerabilityGHSA-p498-v437-472g
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.@intlify/core-base@11.1.9: 2 known vulnerabilitiesGHSA-8rc2-428q-7ww3, GHSA-x8qp-wqqm-57ph
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.@mozilla/readability@0.5.0: 1 known vulnerabilityGHSA-3p6v-hrg8-8qj7
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.echarts@6.0.0: 1 known vulnerabilityGHSA-fgmj-fm8m-jvvx
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.fast-copy@3.0.2: 1 known vulnerabilityGHSA-jggr-w7fw-pc2j
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.8: 4 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.glob@13.0.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.22: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.27: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.47: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.mermaid@11.8.1: 11 known vulnerabilitiesGHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-7rqq-prvp-x9jh +6 more
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 1 known vulnerabilityGHSA-g3hv-75wg-m249
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.6: 1 known vulnerabilityGHSA-g3hv-75wg-m249
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@7.1.1: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.qs@6.14.1: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.serialize-javascript@7.1.2: 1 known vulnerabilityGHSA-m5mm-p8h7-m29v
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.vue-i18n@11.1.9: 2 known vulnerabilitiesGHSA-8rc2-428q-7ww3, GHSA-x8qp-wqqm-57ph
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.0: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
cdn.sheetjs.comregistry.npmjs.orgrepo.yarnpkg.com
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Taskyon alternatives
View more →Similar ai agents in Browser Automation, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Taskyon (this page) Xyntopia | 56 | MIT | Oct 25, 2026 | Scanned, no flagged issues |
| Browser Use browser-use | 120k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| CloakBrowser CloakHQ | 33k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Invisible Dots feder-cr | 32k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| OpenCLI jackwener | 31k | Apache-2.0 | Oct 26, 2026 | Scanned, no flagged issues |
| Stagehand browserbase | 26k | MIT | Oct 30, 2026 | Scanned, no flagged issues |