agents
A home for your AI agents
88%
Total Score
healthy
Actively maintained Cloudflare project with strong release, contributor, and provenance signals; all 33 workflow actions are unpinned.
Health Score Breakdown
All eight workflows were analyzed with no high- or medium-severity findings, no untrusted checkouts, and no script injection. However, all 33 action references are unpinned, and the auditor reported trusted publishing; these are workflow hygiene concerns without a demonstrated exploit path.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-1721 agents is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.3.10. | 0.0.0 - 0.3.10 | Medium |
CVE-2026-1664 agents is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.0.0 - 0.3.7. | 0.0.0 - 0.3.7 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yaml Version ^2.9.0 | — | — |
nanoid Version ^5.1.16 | — | — |
capnweb Version ^0.12.0 | — | — |
esbuild Version ^0.28.1 | — | — |
mimetext Version ^3.0.28 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 14 years ago
- Unpacked Size
- 10 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.