Yutha AI Agent

by abhinavg6• 10•• Scanned•Claim this listing•Request removal
Developer Toolsagent coordinationai agentscedar policycrewaiframework agnostic

Open-source infrastructure for groups of AI agents — identity, capability, accountability, and norms. Framework-agnostic.

Yutha is an open-source ai agent by abhinavg6, written mainly in Rust, with 10 GitHub stars and the Apache-2.0 license. Its code was last updated Jun 12, 2026.

Scan summary: scanned Nov 5, 2026 at commit d617225. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at d617225 · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanpass
Dependency audit241 known vulnerabilitiesfail
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (119)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    aws-smithy-json@0.61.9: 1 known vulnerability
    GHSA-8ffr-xgwf-xj56
    Cargo.lock
  • medium
    aws-smithy-json@0.62.5: 1 known vulnerability
    GHSA-8ffr-xgwf-xj56
    Cargo.lock
  • medium
    quinn-proto@0.11.14: 5 known vulnerabilities
    RUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0342
    Cargo.lock
  • medium
    rustls-webpki@0.101.7: 4 known vulnerabilities
    RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    Cargo.lock
  • medium
    rustls-webpki@0.102.8: 5 known vulnerabilities
    RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    Cargo.lock
  • medium
    pymdown-extensions@10.21.3: 2 known vulnerabilities
    PYSEC-2026-3609, PYSEC-2026-3654
    requirements-docs.txt
  • medium
    aiohttp@3.13.5: 22 known vulnerabilities
    PYSEC-2026-2104, PYSEC-2026-2105, PYSEC-2026-2106, PYSEC-2026-2107, PYSEC-2026-2108 +17 more
    sdks/python/uv.lock
  • medium
    cryptography@48.0.0: 4 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
    sdks/python/uv.lock
  • medium
    filelock@3.29.0: 9 known vulnerabilities
    GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
    sdks/python/uv.lock
  • medium
    fsspec@2026.4.0: 1 known vulnerability
    PYSEC-2026-4217
    sdks/python/uv.lock
  • medium
    json-repair@0.25.2: 1 known vulnerability
    GHSA-xf7x-x43h-rpqh
    sdks/python/uv.lock
  • medium
    langchain-core@0.3.86: 2 known vulnerabilities
    PYSEC-2026-2193, PYSEC-2026-2562
    sdks/python/uv.lock
  • medium
    langgraph@0.3.34: 1 known vulnerability
    PYSEC-2026-83
    sdks/python/uv.lock
  • medium
    langgraph-checkpoint@2.1.2: 3 known vulnerabilities
    PYSEC-2026-1527, PYSEC-2026-2573, PYSEC-2026-2574
    sdks/python/uv.lock
  • medium
    langgraph-sdk@0.1.74: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    sdks/python/uv.lock
  • medium
    langsmith@0.8.3: 1 known vulnerability
    GHSA-f4xh-w4cj-qxq8
    sdks/python/uv.lock
  • medium
    mcp@1.27.1: 7 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    sdks/python/uv.lock
  • medium
    oauthlib@3.3.1: 4 known vulnerabilities
    PYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c
    sdks/python/uv.lock
  • medium
    python-multipart@0.0.29: 4 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
    sdks/python/uv.lock
  • medium
    starlette@1.1.0: 2 known vulnerabilities
    PYSEC-2026-248, PYSEC-2026-249
    sdks/python/uv.lock
  • medium
    urllib3@2.7.0: 3 known vulnerabilities
    PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
    sdks/python/uv.lock
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/oidc/reject-issuer/iss_mismatch.json:39
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/oidc/reject-issuer/iss_mismatch.json:39
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/reject-audience/audience_mismatch.json:32
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/reject-audience/audience_mismatch.json:32
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/reject-audience/audience_mismatch.json:32
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_aa_msg_128.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_ascending_msg_1.json:10
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/oidc/accept-es256/projected_claims.json:48
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/oidc/accept-es256/projected_claims.json:48
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/oidc/accept-es256/projected_claims.json:48
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_alternating_msg_8.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_ascending_msg_32.json:10
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/selectors/selectors_string_map_projection.json:38
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/selectors/selectors_string_map_projection.json:38
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/selectors/selectors_string_map_projection.json:38
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/oidc/reject-expired/exp_past.json:39
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/oidc/reject-expired/exp_past.json:39
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/oidc/reject-expired/exp_past.json:39
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/reject-malformed/unknown_kid.json:32
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/reject-malformed/unknown_kid.json:32
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/oidc/reject-audience/aud_mismatch.json:39
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/oidc/reject-audience/aud_mismatch.json:39
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/oidc/reject-audience/aud_mismatch.json:39
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/reject-trust-domain/trust_domain_not_in_bundle.json:32
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/reject-trust-domain/trust_domain_not_in_bundle.json:32
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/accept-ecdsa-p256/es256_happy_path.json:35
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/accept-ecdsa-p256/es256_happy_path.json:35
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/accept-ecdsa-p256/es256_happy_path.json:35
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_zero_empty_msg.json:10
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/reject-signature/signature_mismatch.json:32
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/reject-signature/signature_mismatch.json:32
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/reject-signature/signature_mismatch.json:32
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/oidc/reject-signature/bit_flipped.json:39
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/oidc/reject-signature/bit_flipped.json:39
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/oidc/reject-signature/bit_flipped.json:39
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_descending_empty_msg.json:10
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/oidc/accept-es256/happy_path.json:42
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/oidc/accept-es256/happy_path.json:42
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_hash_derived_short.json:11
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_aa_msg_16.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_alternating_msg_64.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/reject-malformed/not_a_jws_compact_serialization.json:32
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/reject-expired/credential_expired.json:32
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/reject-expired/credential_expired.json:32
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/reject-expired/credential_expired.json:32
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_zero_hello_world.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_descending_msg_256.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_one_msg_64.json:10
  • low
    Possible example credential in docs/tests: jwt-base64
    spec/vectors/attestor/spiffe/selectors/selectors_mixed_type_skipped.json:35
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/attestor/spiffe/selectors/selectors_mixed_type_skipped.json:35
  • low
    Possible example credential in docs/tests: jwt
    spec/vectors/attestor/spiffe/selectors/selectors_mixed_type_skipped.json:35
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_ff_empty_msg.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_ff_msg_1.json:10
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_hash_derived_spec.json:11
  • low
    Possible example credential in docs/tests: generic-api-key
    spec/vectors/signer/sign-and-verify/seed_one_msg_32.json:10
  • low
    anyhow@1.0.102: 1 known vulnerability
    RUSTSEC-2026-0190
    Cargo.lock
  • low
    azure_security_keyvault_keys@0.14.0: 1 known vulnerability
    RUSTSEC-2026-0439
    Cargo.lock
  • low
    block-buffer@0.12.0: 1 known vulnerability
    GHSA-qwgh-2vcv-g2f7
    Cargo.lock
  • low
    cedar-policy@3.4.2: 1 known vulnerability
    GHSA-c33x-vcv4-vg3g
    Cargo.lock
  • low
    cmov@0.5.3: 1 known vulnerability
    GHSA-3rjw-m598-pq24
    Cargo.lock
  • low
    crypto-bigint@0.4.9: 1 known vulnerability
    RUSTSEC-2026-0387
    Cargo.lock
  • low
    crypto-bigint@0.5.5: 1 known vulnerability
    RUSTSEC-2026-0387
    Cargo.lock
  • low
    ctutils@0.4.2: 1 known vulnerability
    RUSTSEC-2026-0385
    Cargo.lock
  • low
    event-listener@5.4.1: 1 known vulnerability
    RUSTSEC-2026-0221
    Cargo.lock
  • low
    h2@0.3.27: 1 known vulnerability
    RUSTSEC-2026-0258
    Cargo.lock
  • low
    h2@0.4.14: 1 known vulnerability
    RUSTSEC-2026-0258
    Cargo.lock
  • low
    lru@0.12.5: 2 known vulnerabilities
    RUSTSEC-2026-0002, RUSTSEC-2026-0253
    Cargo.lock
  • low
    opentelemetry_sdk@0.31.0: 1 known vulnerability
    GHSA-w9wp-h8wv-79jx
    Cargo.lock
  • low
    pin-utils@0.1.0: 1 known vulnerability
    RUSTSEC-2026-0441
    Cargo.lock
  • low
    rsa@0.9.10: 1 known vulnerability
    RUSTSEC-2023-0071
    Cargo.lock
  • low
    rustls@0.21.12: 3 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv
    Cargo.lock
  • low
    rustls@0.22.4: 3 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv
    Cargo.lock
  • low
    rustls@0.23.40: 4 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    Cargo.lock
  • low
    rustls-pemfile@2.2.0: 1 known vulnerability
    RUSTSEC-2025-0134
    Cargo.lock
  • low
    rustls-webpki@0.103.13: 1 known vulnerability
    RUSTSEC-2026-0382
    Cargo.lock
  • low
    serde_with@3.20.0: 1 known vulnerability
    GHSA-7gcf-g7xr-8hxj
    Cargo.lock
  • low
    tokio@1.52.3: 1 known vulnerability
    RUSTSEC-2026-0386
    Cargo.lock
  • low
    unsafe-libyaml@0.2.11: 1 known vulnerability
    RUSTSEC-2024-0449
    Cargo.lock
  • low
    webpki-root-certs@1.0.7: 1 known vulnerability
    RUSTSEC-2026-0383
    Cargo.lock
  • low
    webpki-roots@1.0.7: 1 known vulnerability
    RUSTSEC-2026-0381
    Cargo.lock
  • low
    zstd@0.13.3: 1 known vulnerability
    RUSTSEC-2026-0391
    Cargo.lock
  • low
    zstd-safe@7.2.4: 12 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +7 more
    Cargo.lock
  • low
    zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerability
    RUSTSEC-2026-0410
    Cargo.lock
  • low
    mkdocs-material@9.5.49: 1 known vulnerability
    PYSEC-2026-3864
    requirements-docs.txt
  • low
    idna@3.9.0: 1 known vulnerability
    PYSEC-2026-215
    requirements-docs.txt
  • low
    multidict@6.7.1: 1 known vulnerability
    PYSEC-2026-4244
    sdks/python/uv.lock
  • low
    opentelemetry-api@1.42.0: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    sdks/python/uv.lock
  • low
    pydantic-settings@2.14.1: 1 known vulnerability
    GHSA-4xgf-cpjx-pc3j
    sdks/python/uv.lock
  • low
    setuptools@82.0.1: 2 known vulnerabilities
    PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
    sdks/python/uv.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Yutha alternatives

View more →

Similar ai agents in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Yutha (this page)
abhinavg6
10Apache-2.0Jun 12, 2026Scanned, no flagged issues
Deepseek Harness
deepseek-ai
268kMITOct 30, 2026Scanned, no flagged issues
Ponytail
DietrichGebert
182kMITOct 29, 2026Scanned, no flagged issues
Orca
stablyai
112kMITNov 1, 2026Scanned, no flagged issues
Deer Flow
bytedance
85kMITNov 1, 2026Scanned, no flagged issues
Ruflo
ruvnet
80kMITNov 1, 2026Scanned, no flagged issues