cuga-project/cuga-agent

CUGA is an open-source generalist agent harness for the enterprise, supporting complex task execution on web and APIs, OpenAPI/MCP integrations, composable architecture, reasoning modes, and policy-aware features.

859 starsPythonNOASSERTIONcomputer-useenterprisegeneralist-agentmcp

SCANNED68/100

Scanned 2026-07-10 · deepseek v1

Dimension breakdown

Security

72/100

6 findings

Quality

85/100

No findings

License

70/100

No findings

Completeness

35/100

No findings

Findings (6)

MEDIUM: 4LOW: 1INFO: 1

MEDIUMsecurityHardcoded API Key in Quick Start Example
MEDIUMsecurityPotential SSRF via User-Controlled URLs
MEDIUMsecurityInsecure File Operations in Knowledge Ingestion
MEDIUMsecurityLack of Input Validation in Tool Execution
LOWsecurityExposure of Internal Architecture Details

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/cuga-project/cuga-agent.svg)](https://archimedes.market/r/cuga-project/cuga-agent)

HTML

<a href="https://archimedes.market/r/cuga-project/cuga-agent"><img src="https://archimedes.market/api/badge/cuga-project/cuga-agent.svg" alt="Archimedes Trust Verified"/></a>