gigioneggiando /

argo

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would

A new way for AI to search for data
View on GitHub
64GitHub stars
162commits on main
12forks
v0.10.0latest release, 2026-10-21

Python 91.8%, JavaScript 5.4%, CSS 1.9%, Jinja 0.6% · created 2026-06-17 · last push 2026-10-23

What XERJ indexed

Snapshot

215 files · 1.9 MB

The whole repository at commit ad7dc0b80e (2026-10-05). main is 31 commits ahead.

Selected work

Gigi
@gigioneggiando

“add deterministic evidence contract”. 18 files, 1,054 lines in argo, tests, webapp.

Licence

The repository

Apache-2.0

Checked by a person at the pinned commit.

The XERJ corpus

Apache-2.0, with credit

The author agreed by email on 2026-10-05. Same terms as the repository. Answers name the repo, the commit and the file:line.

in licence reviewnot in the hub yetsuggested use: adapt with attribution

agentic-aiaicybersecurityfault-localizationvulnerability-detectionai-securityappsecbug-bounty

Example questions

The prompt

Paste it into your AI agent. It clones gigioneggiando/argo at the pinned commit and indexes it on your machine.

Search the GitHub repository gigioneggiando/argo with XERJ (https://hub.xerj.org/corpus/gigioneggiando--argo).
Run these in a shell, in order, and check each result before the next:
1. xerj --help  (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh
2. git clone https://github.com/gigioneggiando/argo argo && git -C argo checkout ad7dc0b80e66ee326458dbd49e2d451fddb74ff1
3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data
4. xerj autoindex ./argo --url http://127.0.0.1:9200 --prefix argo --progress plain
5. xerj autoindex map --url http://127.0.0.1:9200
Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt
Licence: Apache-2.0. Keep the copyright notice and credit the authors.

Related

GigiSecurity and vulnerabilities corporakicscontrolflowhaystackbastyn-labs/bastyn-scanmughalhere/prompt-protectionaggrete/aggrete

Stats: GitHub API, fetched 2026-10-23. Snapshot: the git tree at the pinned commit. Selected work and consent: the XERJ registry.