Z3r0

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Framework

Vite, FastAPI

Database / ORM

SQLAlchemy

AI

OpenAI SDK, MCP SDK

API layer

Pydantic, Uvicorn

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• AI
  Multi-agent orchestrationA lead agent coordinates specialist agents for intelligence gathering, validation, code audit, reverse analysis, and cryptanalysis.
• AI
  LightRAG retrieval contextBuilding knowledge graphs with LightRAG Core provides matching original document chunks and graph context for task-oriented inputs.
• Other
  Preloaded sandbox toolchainThe default image provides targeted DNS, HTTP, and service diagnostics plus local artifact, Android, firmware, reverse engineering, browser, and Python capabilities behind sandbox-local skills.
• Other
  Immutable evidence recordsImmutable work item-attributed observation with provenance, a stable source reference, supersession, and guarded invalidation.
• Other
  Evidence-backed findingsEvidence-backed security conclusion with validation, impact, disposition, and severity kept consistent with optional CVSS scoring.
• Other
  Asset graph explorationOperators can explore the target environment as an asset graph, assign specialists to specific assets and test surfaces
• Other
  Sandbox shell and file accessthe same sandbox boundary supports command execution, shell sessions, file management, browser/noVNC review, and sandbox-local skills.
• Other
  FOFA asset-search integrationoptional FOFA asset-search integration
• UI
  Replayable event timelineThe UI consumes normalized timeline events that can be streamed live or loaded later as history.

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 5 unverifiable items were discarded. A README claim is the maker's description, not something we tested.