DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to confirm security candidates in a local app with Myrqen

Static analysis flags candidates, then your agent tests the running app and marks each one verified, refuted, or needs_review.

Authorization notice. Myrqen is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Who it is forA developer with a TypeScript, JavaScript, or Python web app on their machine who wants a security check before shipping.

The problemStatic scanners flag code that may be vulnerable but cannot show whether the running app actually behaves that way, so results are hard to trust.

The outcomeA report that separates observed vulnerabilities from unconfirmed candidates, with evidence attached to every verified finding.

What you need first

  • A coding agent you already use, such as Claude Code or Codex
  • Node.js 22 or newer and npx for the Agent Skill install
  • A local project you own or are explicitly authorized to test
  • Node.js 22 or newer and pnpm if you want to build from source

Steps

  1. Run npx myrqen link once to install the Agent Skill for your coding agent.
  2. Open a terminal in your project folder and start the application locally.
  3. Run myrqen auto --sync no to keep the entire scan on your machine.
  4. Let the agent exercise the running app, then review the report for verified, refuted, and needs_review findings.

Prompt for your agent

Using the Myrqen repository (stijnswapped/Myrqen) Agent Skill, run `myrqen auto --sync no` in <project path> against the app running at <local URL>. Expect an HTML, Markdown, JSON, or SARIF report listing each finding as verified, refuted, or needs_review. Verify that every verified finding includes the evidence the agent observed.

Caveat. Myrqen will not tell you that you are secure, and any candidate nobody exercises stays needs_review.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for stijnswapped/Myrqen and "Confirm security candidates in a local app"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer