LemonCondor /

github-security-researcher

Policy-gated toolkit for security and bug research on public open source code. LLM analysis alone cannot produce CONFIRMED

A new way for AI to search for data
View on GitHub
1GitHub stars

Python

What XERJ indexed

Snapshot

Whole repository

The whole repository at commit 5b97ab5b23 (2026-10-27).

Selected work

Guillaume Marty
@LemonCondor

“Add agentic logic-bug hunting (gsr hunt): Python/Go/JS, deterministic…”. 19 files, 1,079 lines in src/github_security, tests, the project root.

Licence

The repository

Apache-2.0

LICENSE file checked at the pinned commit; the author agreed to inclusion.

The XERJ corpus

Apache-2.0, with credit

The author agreed by email on 2026-10-31. Same terms as the repository. Answers name the repo, the commit and the file:line.

selected for the XERJ Corpus Hublicence clearedsuggested use: adapt with attribution

bug-huntinggolangllmsecuritystatic-analysiscode-analysisllm-securitypython

Example questions

The prompt

Paste it into your AI agent. It clones LemonCondor/github-security-researcher at the pinned commit and indexes it on your machine.

Search the GitHub repository LemonCondor/github-security-researcher with XERJ (https://hub.xerj.org/corpus/lemoncondor--github-security-researcher).
Run these in a shell, in order, and check each result before the next:
1. xerj --help  (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh
2. git clone https://github.com/LemonCondor/github-security-researcher github-security-researcher && git -C github-security-researcher checkout 5b97ab5b23fa83f739f98f9748faf9265a57058e
3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data
4. xerj autoindex ./github-security-researcher --url http://127.0.0.1:9200 --prefix github-security-research --progress plain
5. xerj autoindex map --url http://127.0.0.1:9200
Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt
Licence: Apache-2.0. Keep the copyright notice and credit the authors.

Related

Guillaume Marty Security and vulnerabilities corporagosec-rulesgarakbandit-pluginsActenon/actenon-scanNephilex/nephilexpipelab-org/pipelock

Selected work and consent: the XERJ registry.