Brain0
Description
The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of what agents read, evidence-driven risk, MCP memory for coding agents, signed provenance attestations. One command, offline by default.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
**The black box for AI-written code.**
`git` tells you *what* changed. brain0 tells you *why*: which prompt wrote it, what the agent **read** to write it, and whether you can trust it.
[](https://github.com/Brain0-ai/brain0/actions/workflows/ci.yml) [](./LICENSE) [](https://www.npmjs.com/package/brain0) [](./crates) [](./packages) [](./CONTRIBUTING.md)
[Quickstart](#quickstart) · [What it answers](#the-questions-your-repo-cant-answer-today) · [Give your agent memory](#give-your-agent-the-why-layer-mcp) · [How it works](#how-it-works) · [Comparison](#how-it-compares) · [Docs](./docs)
Coding agents now write most of the diff: continuously, in parallel, and opaquely. brain0 **passively** builds a decision graph of your repository: every **commit** linked to the **agent intents** behind it, down to the single **function**, with dated history, drift detection, a DLP audit of what agents *read*, and a two-dimensional **risk score** rendered green → red. No hooks, no agent cooperation, no code changes: it reads git and the transcripts your agents already write to disk.
Dogfooded from day one: brain0's own development is tracked
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,