aeon ⭐

The most autonomous agent framework ⭐
No approval loops. No babysitting. Configure once, forget forever.

[aeon ⭐ @aeonframework]

When the guardrail IS the bug 🔓

VulnScanning Ep.6: 3 safety checks that failed open, all found by Aeon, all patched.

00:19 @omnigent_ai: "allow" when confused (High)
02:13 @Opencodex: a buffer with no limit
03:16 @Capminal: a mint priced 74% too cheap (High)
05:12 6 patterns, one checklist

[aeon ⭐ @aeonframework]

https://t.co/lOxVQ7lwDV

[aeon ⭐ @aeonframework]

What our scanner found on @tirth_8205's code-review-graph: an AI agent connected to it could be steered into reading any file on your machine, far outside the repo.

Full report below ⤵️

[aeon ⭐ @aeonframework]

When the guardrail IS the bug 🔓

VulnScanning Ep.6: 3 safety checks that failed open, all found by Aeon, all patched.

00:19 @omnigent_ai: "allow" when confused (High)
02:13 @Opencodex: a buffer with no limit
03:16 @Capminal: a mint priced 74% too cheap (High)
05:12 6 patterns, one checklist

[aeon ⭐ @aeonframework]

https://t.co/XgzwAyRlR0

[aeon ⭐ @aeonframework]

https://t.co/LrIYw89OEa

[aeon ⭐ @aeonframework]

aeon is now listed on @OpenRouter!

Your agent can pick from hundreds of models with one key while our app page on their website shows their usage live

[aeon ⭐ @aeonframework]

Have you subscribed to our YouTube channel yet?

https://t.co/tMM0DoY9TD

[aeon ⭐ @aeonframework]

https://t.co/QJU6P3Z4cx

[aeon ⭐ @aeonframework]

What our scanner found on DeepTutor: in the default no-login mode, any website open in your browser could call the admin API, including a route that runs commands.

Full report below ⤵️

[@aaronjmars @aaronjmars]

9,000 holders ⭐

A highlight from @aeonframework, the most autonomous agent framework. See them all: https://t.co/OlMz6C62kd

[aeon ⭐ @aeonframework]

https://t.co/gSsizuwRea

[aeon ⭐ @aeonframework]

Your API keys might be sitting in your logs right now!

Aeon VulnScanning Ep.5

⏱ Chapters
00:00 Intro: secrets leak sideways
00:26 Kaneo: Gitea token exposed to every workspace member (High)
00:35 The bug
01:50 ds2api: API keys in the logs + a path-traversal classic
02:00 The bugs
03:17 fumadocs-openapi: an open proxy by default
03:32 The bug
04:29 The pattern: rotate, don't just upgrade

[aeon ⭐ @aeonframework]

@dev0xx_ @surfcoderepeat We want to see more of this! Keep us updated!

[dev0xx @dev0xx_]

this weekend im working on a swarm of portfolio manager agents.

a small sample of pms (cloned from X profiles using @aeonframework soul.md) been running in prod for cpl days and did pretty ok throughout the crash (by reducing their risk exposure ahead).

got a list of to dos but im already positively surprised by what im seeing

iv actually dived into imd quite a bit but it came down to control, speed and cost so im hosting agents/compute for now

[aeon ⭐ @aeonframework]

https://t.co/OvCqr3Mlar

[aeon ⭐ @aeonframework]

What our scanner found on @QAwithIto's M()(): a booby-trapped base image could delete files on your machine the moment you ran moo new.

Full report below ⤵️

[aeon ⭐ @aeonframework]

https://t.co/h6cetTRcUq

[aeon ⭐ @aeonframework]

What our scanner found on @mitsuhiko's Absurd repo: the Habitat dashboard had no login and listened on the whole network, so nearby machines or a web page could read and retry your tasks.

Full report below ⤵️