ai-jail
Multi-OS sandbox to run AI agents with better constraints (it is not 100% secure, but enough)
HackerAI is an AI agent for penetration testing that helps security practitioners investigate targets, use terminal and browser tools, analyze findings, and prepare reports.
SecurityTypeScript · PythonGitHub @williamsouzadelimaOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
Owners of public repositories under a personal GitHub account can sign in to verify ownership and manage the introduction themselves. No administrator approval is needed.
Sign in, generate a verification file, and commit it to this repository’s default branch within 30 minutes. Files on other branches or forks do not count. Then check the file below to manage the project without administrator approval. Keep the file to retain your access.
If needed, you will go to sign-in. After signing in, return here and press your chosen verification button again.
Run /nomorevibe verify in your project folder to verify ownership and manage the introduction yourself.
Verify in one minuteAsk about other verification options
Find and fix vulnerabilities by chatting with AI
Taken from the repository README
Loading the full README.
Read the full README ↗You'll need the following accounts:
Required:
Optional:
git clone https://github.com/hackerai-tech/hackerai.git
cd hackerai
pnpm install
pnpm run setup
This runs both Next.js and Convex dev servers:
pnpm run dev
Or run them separately in two terminals:
pnpm run dev:next
pnpm run dev:convex
Agent mode runs the agent loop on a Trigger.dev task. To use the agent locally:
Create a project at https://cloud.trigger.dev and copy your dev secret
key (tr_dev_…) into .env.local as TRIGGER_SECRET_KEY.
In the Trigger.dev dashboard → your project → Environment Variables,
add the env vars the task needs to run (these live on the worker, not on
Vercel): NEXT_PUBLIC_CONVEX_URL, CONVEX_SERVICE_ROLE_KEY,
OPENROUTER_API_KEY, OPENAI_API_KEY, one cloud sandbox provider, plus any keys you use
(PERPLEXITY_API_KEY, JINA_API_KEY, S3, etc.).
Start the worker in a third terminal:
pnpm dev:trigger
This starts the default Trigger.dev worker used by local Agent requests.
To start an explicitly routed Trigger.dev branch instead, set a stable
branch name with
TRIGGER_DEV_BRANCH=my-local-agent pnpm dev:trigger. Only use that override
when the request path is configured to target the same Trigger.dev branch.