AgenticVulHunter

AgenticVulHunter is an agentic secure code review research tool for vulnerability analysis with open-weight and API-hosted language models.

Install

Requires Python 3.11+ and Git.

For a local checkout:

pipx install .

After the package is published to PyPI:

pipx install agenticvulhunter

Check the installation:

agenticvulhunter --help
agenticvulhunter --version

Research CLI

The portable package in this repository exposes the SCRBench research commands:

agenticvulhunter diffs
agenticvulhunter experiment --repo /path/to/repository --diff-id <SCRBENCH_COMMIT_ID>

Use agenticvulhunter experiment --help for the complete set of experiment options.

Pipeline

AgenticVulHunter evaluates vulnerability candidates through staged candidate selection, repository knowledge building, CWE retrieval, validation, and filtering.

The research configuration and pipeline parameters are intentionally kept unchanged by the AgenticVulHunter branding update.

AgenticVulHunter is a research-derived review tool. Its findings should support human review and should not be treated as proof that a repository is secure.