git404hub

what is skynet fr?

llawlight12/skynet — explained in plain English

Analysis updated 2026-05-18

29PythonAudience · developerComplexity · 4/5LicenseSetup · moderate

tl;dr

A Python tool that maps a codebase into a graph of functions and calls, then uses an LLM to hunt for security bugs while tracing how untrusted data moves through the code.

vibe map

mindmap
  root((skynet audit))
    What it does
      Builds code knowledge graph
      Runs LLM chunk analysis
      Traces taint flow paths
      Runs deep audit pipeline
    Tech stack
      Python
      SQLite
      Tree-sitter
      OpenAI compatible LLM
    Use cases
      Security research
      Pre-review code audit
      Vulnerability triage
    Audience
      Security researchers
      Developers

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Scan a codebase to find likely security bugs before a human review.

VIBE 2

Trace how untrusted input could reach a dangerous function across multiple files.

VIBE 3

Run a deep multi-stage audit pipeline that hunts, validates, and reports vulnerabilities.

VIBE 4

Track false positives per project so future scans do not repeat the same wrong findings.

what's the stack?

PythonSQLiteTree-sitterDeepSeekOpenAI-compatible API

how it stacks up fr

llawlight12/skynetadityasharmadotai-hash/docs-reader-rag-agentalekseiul/hermes-researcher-agent
Stars292929
LanguagePythonPythonPython
Setup difficultymoderateeasymoderate
Complexity4/52/52/5
Audiencedevelopervibe coderresearcher

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · moderate time til it works · 30min

Requires an API key for an OpenAI-compatible LLM endpoint such as DeepSeek before scanning.

Use freely for any purpose, including commercial use, as long as you keep the copyright and license notice.

in plain english

Skynet Audit is a Python tool that uses a large language model to find security bugs in a codebase, but it tries to do this more carefully than just pasting code into a chatbot. The problem it is solving is that plain rule based security scanners understand syntax but not the meaning of the business logic, while an LLM reading raw code tends to make things up, miss connections that span multiple files, and get expensive fast if you are not careful. Skynet's answer is to first turn the codebase into a map before asking the model to look at anything. It parses the repository into a graph of functions and classes and how they call each other, storing this in a local database. Instead of handing the model one giant pile of code, it hands it small, well connected chunks, prioritizing the pieces most likely to matter for security first, so token spending is not wasted on irrelevant code. On top of that graph, it traces how untrusted data could flow from an entry point to a dangerous operation, and when the graph has gaps it cannot resolve on its own, it uses a small agent with access to a language server to fill in the missing links rather than guessing. It also layers in known vulnerability patterns, framework specific security knowledge, and a memory of past false positives from the same project, all fed into the model's prompt. For deeper investigations, there is an eight stage pipeline that goes from initial reconnaissance through hunting, validating, filling gaps, removing duplicates, and finally producing a report, with its own tool agent that can read files, search, and list directories. Progress and cost are tracked so a run can be paused and resumed. It works with any OpenAI compatible LLM endpoint, including DeepSeek. The project is explicitly labeled Alpha stage, meant to support security research and human reviewed audits rather than replace professional testing tools, and it is released under the MIT license.

prompts (copy fr)

prompt 1
Help me set up skynet audit and run a quick scan against a test repository.
prompt 2
Explain how skynet's taint flow tracing decides which code paths to flag.
prompt 3
Walk me through configuring skynet to use a DeepSeek or OpenAI-compatible model.
prompt 4
Show me how to run the eight stage deep audit pipeline and read its report.

Frequently asked questions

what is skynet fr?

A Python tool that maps a codebase into a graph of functions and calls, then uses an LLM to hunt for security bugs while tracing how untrusted data moves through the code.

What language is skynet written in?

Mainly Python. The stack also includes Python, SQLite, Tree-sitter.

What license does skynet use?

Use freely for any purpose, including commercial use, as long as you keep the copyright and license notice.

How hard is skynet to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is skynet for?

Mainly developer.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.