AstrBotDevs/AstrBot

github
github Python re-analysis due

AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature, and can be your openclaw alternative. ✨

maintainer
AstrBotDevs
licence
AGPL-3.0
first seen
2026-05-22
last seen
2026-10-16
releases · 30d
4
github stars
42,015 reported
short id

AstrBotDevs/AstrBot is an MCP server distributed on github, maintained by AstrBotDevs, tracked here since May 2026. It has shipped 140 releases and exposes 5 tools. Tools include _func, registered_tool, runtime_tool, tool, tool_name_or_obj. Its composite risk grade is E — an inferred review prompt computed from observed signals, not a verdict. 2 known CVEs on file.

what we found

2 advisories published against this server still applies to the version it ships, the most severe rated critical, most recently 2025-11-14.

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 5 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools

5
  • _func
  • registered_tool
  • runtime_tool
  • tool
  • tool_name_or_obj

release cadence · 90d

14 releases
2026-07-19 2026-09-01 now

recent releases

last 10
version date src
v4.29.0 2026-10-14 github
v4.29.0-beta.2 2026-10-10 github
v4.29.0-beta.1 2026-10-01 github
v4.28.2 2026-09-27 github
v4.28.1 2026-09-14 github
v4.28.0 2026-09-07 github
v4.28.0-beta.1 2026-09-01 github
v4.27.5 2026-08-31 github
v4.27.4 2026-08-19 github
v4.27.3 2026-08-12 github

view all →