makecindy
Featured
cindy
Cindy is an open-source AI agent that runs locally on your machine, integrates multiple AI harnesses and models, and provides memory, skills, and automation to perform real work in your projects and apps.
AI repository intelligence
FR-AI / ANALYSISWhy it is worth attention
It brings AI-driven security analysis into an interactive agent workflow, enabling developers to scan, review, and fix vulnerabilities without leaving the pi environment, and supports CI/CD pipelines with SARIF exports.
Who it is for
- Developers using the pi coding agent
- Security engineers performing code audits
- CI/CD pipeline maintainers
- Teams wanting automated vulnerability remediation
Use cases
- Scanning an entire repository for security vulnerabilities
- Reviewing uncommitted changes for issues before committing
- Automatically fixing critical findings from a scan
- Integrating security gates in CI using the CLI with fail-on-severity
Strengths
- Interactive scanning with streaming progress and severity-ranked findings
- Multiple scan modes: standard, deep, and diff-based for targeted reviews
- Produces machine-readable SARIF exports for integration with GitHub code scanning
- Teaches the agent to triage findings and propose fixes using natural language commands
Considerations
- Requires Node.js 22+ and Python 3.10+ as dependencies
- Authentication setup needed (ChatGPT sign-in or API key) before first use
- Deep scan mode can be slower and incur higher API costs
README quick start
Usage
Description
A pi package that brings OpenAI Codex Security into your agent sessions: scan repositories for vulnerabilities, review severity-ranked findings, and fix them — all without leaving pi.
Related repositories
Similar projects matched by category, topics, and programming language.
deerwork-ai
Featured
deer-workflow
An open-source Dynamic Workflow runtime that combines deterministic TypeScript orchestration with replaceable Agent runtimes.
Jakubantalik
Featured
thinking-orbs
A React component library that renders six hand-tuned animated thought orb loading indicators on a plain 2D canvas, with two purpose-tuned sizes and automatic theme detection for AI and agent UIs.