{"adoption": {"forks": 594, "observed_at": "2026-08-28T04:09:58.517316+00:00", "stars": 7368}, "canonical_url": "https://ross.abutalabs.com/products/defending-code-reference-harness", "card": {"archived": false, "artifact_type": "framework", "description": "Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize", "domain": ["security", "developer-tools", "artificial-intelligence"], "enriched": true, "function": ["security", "vulnerability-scanning", "agent-framework", "penetration-testing", "developer-tools"], "health_score": 78, "homepage": "https://claude.com/blog/using-llms-to-secure-source-code", "language": "Python", "license": "NOASSERTION", "license_family": "other", "maturity": "maintenance", "member_repos": ["anthropics/defending-code-reference-harness"], "name": "anthropics/defending-code-reference-harness", "platform": ["python", "cli", "cross-platform"], "pushed_at": "2026-08-06T21:42:09+00:00", "repo": "anthropics/defending-code-reference-harness", "stars": 7368, "tags": ["vulnerability-discovery", "threat-modeling", "triage", "patching", "claude-code-skills", "llm-security", "memory-safety", "asan", "detection-and-response", "reference-implementation", "ai-agents", "docker"], "topics": ["security"], "urls": [], "use_cases": ["find memory safety vulnerabilities in C/C++ codebases with an LLM agent", "build a threat model for my repository before scanning", "triage and verify LLM-discovered vulnerability findings to reduce false positives", "automatically generate patches for confirmed vulnerabilities", "customize an autonomous vulnerability scanning pipeline for my language or vuln class", "hunt for signs of an attacker already in my logs and propose a response"], "what_it_is": "A reference implementation from Anthropic for autonomous vulnerability discovery and remediation using Claude, including Claude Code skills for threat modeling, scanning, triage, and patching, plus an autonomous scanning harness configured for C/C++ memory vulnerabilities. It also includes detection-and-response skills for hunting attackers already present in logs.", "when_to_avoid": ["you need a maintained, production-ready product with support - the repo explicitly is not maintained and accepts no contributions", "you want a turnkey scanner that works on every codebase out of the box - the harness is a reference, not a product", "you prefer a managed hosted solution - consider Anthropic's Claude Security product instead", "you need a permissive license - the license is non-standard (NOASSERTION)"], "when_to_choose": ["you want an open-source, customizable reference pipeline for LLM-driven vulnerability discovery and remediation", "you use Claude APIs (including Bedrock, Vertex, or Azure) and want to build your own security scanning workflow", "you need skills for interactive threat modeling, scanning, triage, and patching in Claude Code", "you want to learn Anthropic's best practices for securing source code with LLMs"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/defending-code-reference-harness", "repo": "anthropics/defending-code-reference-harness", "role": "main", "score": 57}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:09:58.517316+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:38:23.873226+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "989bec13ca56db3b11906a6cf107b48af6d2984844cfd57f4473112bcec6a83b", "fetched_at": "2026-08-28T04:09:58.517316+00:00", "kind": "readme", "missing": false, "url": "https://github.com/anthropics/defending-code-reference-harness"}, {"content_hash": "aa0c99625569072290c6d76eeb26863778e293855c9c2d1118f8f37f90294c7e", "fetched_at": "2026-08-29T08:33:50.566403+00:00", "kind": "homepage", "missing": false, "url": "https://claude.com/blog/using-llms-to-secure-source-code"}, {"content_hash": "42493d4b28e3298008c4db558a494ec167d7c0ff7c57fc31e14b960485d5a3f8", "fetched_at": "2026-08-29T08:33:50.578261+00:00", "kind": "site_page", "missing": false, "url": "https://platform.claude.com/docs"}, {"content_hash": "71972a93716a0b14299404bb6d949d740968aad00f0f085079bfae12cf839930", "fetched_at": "2026-08-29T08:33:50.576364+00:00", "kind": "site_page", "missing": false, "url": "http://claude.com/pricing"}, {"content_hash": "54ae70c3efc4daa82eb63eb3d444b67cac1b296751bcf36a201951270a99134b", "fetched_at": "2026-08-29T08:33:50.580148+00:00", "kind": "site_page", "missing": false, "url": "https://claude.com/pricing"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 96, "longevity": 7, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "young", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 103, "days_push": 27, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 57, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}