OpenHands/OpenHands
OpenHands is an AI-powered platform that automates software development tasks, enabling developers to code less and produce more by modifying code, running commands, browsing the web, and integrating APIs efficiently.
KeygraphHQ/shannon
Shannon is an autonomous AI pentester developed by Keygraph designed for web applications and APIs. It conducts security testing by combining static source code analysis with dynamic live exploitation. The tool scrutinizes an application's source code to pinpoint potential attack vectors, then leverages browser automation and command-line tools to execute actual exploits against the running application and its APIs. A key feature is its focus on "proof-by-exploitation reports," meaning only vulnerabilities with a working proof-of-concept are included in the final report, moving beyond speculative warnings to verifiable findings. This open-source version of Shannon serves as a standalone command-line interface (CLI) agent for white-box testing, requiring users to run it against applications they own or are authorized to test. It supports authenticated testing, OWASP-focused coverage (targeting Injection, XSS, SSRF, Broken Authentication, and Broken Authorization), and resumable workspaces. The project aims to bridge the security gap between rapid code deployment and infrequent penetration testing by offering on-demand, automated testing. Key capabilities include white-box attack planning, autonomous execution, and detailed reports that validate findings with reproducible steps.
https://github.com/KeygraphHQ/shannon
Also in AI Agents
usestrix/strix
Strix is an open-source AI-driven security testing platform that autonomously finds, validates, and helps fix application vulnerabilities through dynamic and collaborative AI agents.
aaif-goose/goose
Goose is an open-source, native AI agent available as a desktop app, CLI, and API, designed for diverse tasks like code, research, writing, and automation, supporting over 15 LLM providers.
wshobson/agents
A comprehensive collection of 44 specialized AI subagents for Claude Code that enhance development workflows with domain-specific expertise across software development, infrastructure, security, data, and business domains.
agentscope-ai/agentscope
AgentScope is a transparent, modular, and customizable framework for building LLM-empowered multi-agent applications with real-time control and asynchronous execution.
iOfficeAI/OfficeCLI
OfficeCLI is an open-source command-line interface and API enabling AI agents to read, edit, and automate Word, Excel, and PowerPoint files without needing Office suite installations.
langchain-ai/deepagents
Deep Agents is an open-source agent harness built on LangChain and LangGraph that enables AI agents to plan, execute, and delegate complex long-horizon tasks using customizable tools, subagents, and human-in-the-loop workflows.
gastownhall/beads
Beads is a distributed graph issue tracker for AI agents, powered by Dolt, providing a persistent, structured memory to manage long-horizon tasks without losing context.