DEDUPED Hot AI repos, turned into use cases Get the Monday 5
128 stars · TypeScript

How to use Myrqen: what you can do with it

Myrqen is a source-available TypeScript security scanner that finds candidate vulnerabilities in code and has your coding agent test them against your locally running app.

Trended earlier

View repo on GitHub

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer

Authorization notice. This tool is dual-use. Only use it on software, sites and systems you own or have explicit permission to test, and follow the relevant licenses and terms of service.

What do you want to do?

3 use cases

  • Confirm security candidates in a local app

    Static analysis flags candidates, then your agent tests the running app and marks each one verified, refuted, or needs_review.

    View prompt
    Using the Myrqen repository (stijnswapped/Myrqen) Agent Skill, run `myrqen auto --sync no` in <project path> against the app running at <local URL>. Expect an HTML, Markdown, JSON, or SARIF report listing each finding as verified, refuted, or needs_review. Verify that every verified finding includes the evidence the agent observed.

  • Read the agent instructions before running them

    Review the plain Markdown Agent Skill and its reference documents before your coding agent acts on them.

    View prompt
    Read `SKILL.md` and the reference documents in packages/skill/myrqen of the Myrqen repository (stijnswapped/Myrqen). Summarize the safety boundaries and the finding states, and list any instruction that would let the agent act outside a local app. Expect a short written review; verify that the summary cites the file each claim came from.

  • Measure the scanner's accuracy on its corpus

    Run the published benchmark to get recall, precision, and false-positive results for the static pass.

    View prompt
    In the stijnswapped/Myrqen repository, run `pnpm benchmark` and report recall, precision, and the safe-case false-positive rate. Expect a non-zero exit if results fall below the release gates or regress from benchmark/baseline.json. Verify that the reported numbers match the committed baseline files.

Quick start with Myrqen

  1. Check you have what it needs: A coding agent you already use, such as Claude Code or Codex; Node.js 22 or newer and npx for the Agent Skill install; A local project you own or are explicitly authorized to test.
  2. Open stijnswapped/Myrqen on GitHub and read the README and license.
  3. Run npx myrqen link once to install the Agent Skill for your coding agent.
  4. Open a terminal in your project folder and start the application locally.
  5. Run myrqen auto --sync no to keep the entire scan on your machine.
  6. Let the agent exercise the running app, then review the report for verified, refuted, and needs_review findings.

These steps come from our top use case, Confirm security candidates in a local app, which also has a copy-paste agent prompt.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for stijnswapped/Myrqen

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Myrqen alternatives · Best AI repos for Security and science

About this repo

  • Who it is forDevelopers who already use Claude Code or Codex and want security checks on a local app without uploading their repository.
  • Why it is hot128 stars, launched 66 days ago
  • LanguageTypeScript
  • Sourcegithub.com/stijnswapped/Myrqen · Back to Hot repos

Requirements

  • A coding agent you already use, such as Claude Code or Codex
  • Node.js 22 or newer and npx for the Agent Skill install
  • A local project you own or are explicitly authorized to test
  • Node.js 22 or newer and pnpm if you want to build from source

Add this badge to your README

Maintain Myrqen? Show readers where to find these use cases. Use cases on Deduped

Markdown 

[![Use cases on Deduped](https://dedupedai.com/badge/stijnswapped/Myrqen.svg)](https://dedupedai.com/use-cases/stijnswapped-myrqen/?utm_source=github&utm_medium=badge&utm_campaign=stijnswapped-Myrqen)

HTML 

<a href="https://dedupedai.com/use-cases/stijnswapped-myrqen/?utm_source=github&amp;utm_medium=badge&amp;utm_campaign=stijnswapped-Myrqen"><img src="https://dedupedai.com/badge/stijnswapped/Myrqen.svg" alt="Use cases on Deduped" height="20"></a>

A static image, no tracking script. About the badge

Questions about Myrqen

What is Myrqen?

Myrqen is a source-available TypeScript security scanner that finds candidate vulnerabilities in code and has your coding agent test them against your locally running app. It is an open-source project on GitHub: https://github.com/stijnswapped/Myrqen.

Who is Myrqen for?

Developers who already use Claude Code or Codex and want security checks on a local app without uploading their repository.

What can I do with Myrqen?

3 use cases so far, for example: Confirm security candidates in a local app; Read the agent instructions before running them; Measure the scanner's accuracy on its corpus. Each has steps and a copy-paste agent prompt.

What do I need to run Myrqen?

A coding agent you already use, such as Claude Code or Codex; Node.js 22 or newer and npx for the Agent Skill install; A local project you own or are explicitly authorized to test; Node.js 22 or newer and pnpm if you want to build from source.

What are alternatives to Myrqen?

Other hot AI repos in Security and science: RiftX, Hacker, Codex Privacy Hud, Forge Guardian, Open Keylet.

Is Myrqen safe to run?

Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.