Cybersecurity toolkits · Rank #2
violin
Grade A: derived only from the two verdicts below. How grades work
Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.
Why this verdict
How we check →- 219 commits by 6 contributors in the last 90 days (143 in the last 30). receipt ↗
- Latest release v4.0.0, 5 days ago. receipt ↗
- On current major: Pydantic. receipt ↗
Snapshot: commit 10d802a on master, checked 2026-10-19 07:29 UTC. Receipts link to files at this exact commit.
Dependency freshness
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- API layer
- Pydantic
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- OtherGuarded target execution
Scope, phase, PTT, skill, hypothesis, history, and synchronization checks run before a target command starts.
- OtherEvidence-backed findings
A typed submission binds each validated finding to authenticated execution receipts.
- OtherGuarded command execution
Execute one guarded command
- OtherBounded command bursts
Execute a bounded command file
- OtherBackground execution status
Read background execution status
- OtherBackground execution cancel
Cancel tracked background execution
- OtherBatch review
Review a completed batch and settle state
- OtherTarget resolution
Resolve the approved assessment target
- OtherStatus and blockers
Explain current tasks, skills, and blockers
- OtherScope approval gate
No target interaction before scope approval and bootstrap validation.
- TestingRelease-gated verification
Plugin registration, schemas, skill snapshots, documentation contracts, lint, formatting, and the full test suite are release-gated.
Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 3 unverifiable items were discarded. A README claim is the maker's description, not something we tested.
Watch violin
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Active | Current deps | 219 |
| Oct 12, 2026 | Active | Current deps | 157 |
| Sep 29, 2026 | Active | Current deps | 186 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (master) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- pyproject.toml ↗ declared dependency versions and stack (at commit 10d802a)
- README ↗ quoted features at the checked commit
- PyPI ↗ latest versions of Python packages (each linked in the table above)