GitHub's open source AI agent uncovers 24 Android vulnerabilities
We found 24 Android vulnerabilities using our open source AI security agent
GitHub Security Lab's Taskflow Agent, built on open source AI taskflows, found 24 Android vulnerabilities, including a location-tracking flaw in OsmAnd and a Wikipedia account takeover via deeplink. The agent splits research into incremental steps to help LLMs find complex logic bugs. The taskflows are open source and can be run on your own project with a GitHub Copilot license.
LLMs can find logic vulnerabilities with critical impact, not just generic bug classes.