Security / AI Security

Defending Code Reference Harness

An open-source reference implementation for autonomous vulnerability discovery and remediation with Claude. It includes Claude Code skills for threat modeling, scanning, triage, patching, plus a harness for running a recon → find → verify → report → patch pipeline.

Clear28/30
Useful27/30
Specific16/20
Complete13/20
Defending Code Reference Harness screenshot

Why it was accepted

The page clearly describes a real AI-powered security project with concrete capabilities, setup steps, example commands, and a visible workflow for scanning, triage, and patching. It’s useful for AI and security builders, and the repository shows enough detail to support a public listing.

Weakness

The repo says it is a reference implementation and not maintained, so visitors cannot tell how active it is or whether the pipeline works well on many codebases. The snapshot also doesn’t show benchmarks, release history, or real-world results beyond the documented workflow.

Review status

144 days ago #1371 ↓ -6

Last evaluated 144 days ago. Current rank #1371. Down 6 spots in the rankings.

Score history

84

Related listings

Snyk Agent Scan screenshot

Security / Agent Security

Open-source security scanner for AI agents, MCP servers, and agent skills. It auto-discovers installed agent components and checks them for prompt injection, tool poisoning, secrets, malware payloads, and related risks.

Vigil screenshot
#15 Vigil
91

Security / Penetration Testing

An AI harness for long-running penetration tests, bug bounties, and code audits. It combines specialist agents, a Kali runtime, durable state, and second-agent verification for findings.

Cynative screenshot
#17 Cynative
91

Security / Cloud Security

Open-source security agent framework for cloud, code, and runtime. It ships 45 built-in agents for AWS, GCP, Azure, Kubernetes, GitHub, and GitLab, and lets users create custom agents in a single markdown file.

Xalgorix screenshot
#85 Xalgorix
90

Security / Penetration Testing

Self-hosted AI security testing platform for authorized pentesting and bug bounty workflows, with a local web UI, live agent telemetry, verified findings, and branded PDF reports.