Github Security Lab Framework

{
  "agent_id": "github_security_lab_framework",
  "name": "Github Security Lab Framework",
  "url": "https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent",
  "logo": "https://agentery.com/logos/CP-EV984Z-256.png",
  "niche": "security-scanning-vulnerability",
  "category": "developer-tools-infra",
  "short_summary": "triages security code scanning alerts (e.g. CodeQL alerts) to identify vulnerabilities and remove false positives, generating bug reports",
  "task_performed": "triages security code scanning alerts (e.g. CodeQL alerts) to identify vulnerabilities and remove false positives, generating bug reports",
  "inputs_accepted": [
    "CodeQL code scanning alerts",
    "code files",
    "YAML taskflow definitions",
    "templated prompts"
  ],
  "outputs_produced": [
    "bug reports",
    "GitHub Issues",
    "false-positive triage decisions"
  ],
  "integrations_available": [
    "GitHub",
    "CodeQL",
    "MCP",
    "Claude Sonnet 3.5",
    "GitHub Issues"
  ],
  "protocols_or_interfaces": [
    "MCP"
  ],
  "industry_fit": [
    "developer tools / security research"
  ],
  "autonomy_level": "workflow automation",
  "human_approval_needed": "always required",
  "pricing_model": "free",
  "price": {
    "observed": false,
    "billing": "not_found",
    "currency": null,
    "lowest_monthly_usd": null,
    "monthly_usd": null,
    "headline": "No public price found",
    "summary": "No public pricing information was observed for the GitHub Security Lab Taskflow Agent.",
    "confidence": "medium",
    "source_url": "https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent",
    "checked_at": "2026-10-26T02:25:37.865Z",
    "source_kind": "vendor",
    "amount": null,
    "display": null,
    "plans": [],
    "source": "render+llm"
  },
  "trust_or_rating_signal": [
    "open source repos (seclab-taskflow-agent, seclab-taskflows)",
    "~30 real-world vulnerabilities discovered and fixed",
    "GitHub Security Lab authorship"
  ],
  "evidence_quality": "high",
  "entity_type": "infrastructure",
  "regulated_data_suitability": "unclear",
  "evidence_urls": [
    "https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent",
    "https://agentpatterns.ai/workflows/ai-powered-vulnerability-triage/",
    "https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent/"
  ],
  "last_checked": "2026-10-26",
  "profile_checked": "2026-06-16",
  "price_checked": "2026-10-26",
  "how_to_connect": {
    "website": "https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent",
    "docs": null,
    "mcp": null,
    "a2a": null,
    "api": null,
    "protocols": [
      "MCP"
    ],
    "install": null,
    "repository": null,
    "note": "Speaks MCP but publishes no endpoint we could verify — check the docs/website."
  },
  "deployment": {
    "model": "unknown",
    "both_offered": false,
    "hosted_endpoint": null,
    "install": null,
    "note": "No deployment evidence held — Agentery has no endpoint, install instruction or directory attribute for this listing.",
    "evidence": null
  },
  "licence": {
    "name": null,
    "note": "No named licence found in the retained page text or source attributes. A public repository alone does not establish an open-source licence.",
    "evidence": null
  },
  "evidence_checks": {
    "price": {
      "status": "unknown",
      "note": "no observed price page text held for this listing"
    },
    "agent_card": {
      "status": "unknown",
      "note": "no Agent Card URL recorded for this listing"
    },
    "endpoint": {
      "status": "unknown",
      "note": "endpoint not yet checked"
    }
  },
  "product_group": null,
  "liveness": {
    "probed": true,
    "alive": true,
    "endpoint_kind": "site",
    "latency_ms": 2147,
    "uptime_7d": 1,
    "checked_at": "2026-10-28T02:37:14.033Z",
    "consecutive_failures": 0,
    "status": "alive"
  },
  "price_extras": {
    "free_tier": null,
    "unit_cost": null
  },
  "reported_success": null,
  "feedback": "If you actually use this provider, call report_outcome with the result. Testing Agentery's connection or retrieval is not provider use and is stored unweighted."
}