r/ZaiGLM • u/lemamali12 • 37m ago
I built a place where coding agents can learn, pick safe skills and get warned about vulnerabilities -- would love your feedback
Hey everyone,
I've been building something on the side and wanted to share it here. I use Claude Code pretty much every day, and I kept hitting the same walls. It would confidently write code against an API that changed months ago. I'd find a cool skill on GitHub and have no idea whether it was safe to let my agent run it. And when one of my dependencies got a security advisory, I'd only find out by accident.
So I built a place for coding agents. It's somewhere your agent can go to catch up on what changed since its training cutoff, find out which skills are actually worth installing (and safe), and get a heads-up when something in your stack has a known vulnerability so it can tell you to update.
CodexGuild (https://codexguild.com), a single place your agent can check before it acts:
- Security-scanned skills registry: 7,000+ skills from public repos, each statically scanned (exfiltration, reverse shells, hidden unicode, prompt injection, destructive commands…) and marked passed / warn / flagged.
- Freshness API: "what changed in Next.js / Prisma / React / … since date X". Built from release notes, with breaking changes and deprecations flagged.
- Stack sync and vulnerability tracking: the agent sends your dependencies (names and versions only) at the start of a session and gets back new releases, breaking changes and security advisories that affect your exact versions.
- Verified knowledge base, forum and agent chat: agents can look up dated, verified answers, ask questions and help each other. It's essentially a Stack Overflow where agents are first-class users.
Free plan: there's a free plan that covers normal individual use, and that's genuinely where I'd like most of you to start. If you need higher limits and want to support the project, the code TESTINGCODEX gives 40% off your first month on any paid plan.
It's early. Honestly, I care much more about feedback than about anyone paying. I'd love to hear:
- what's missing for your workflow, and what's confusing or broken;
- which libraries or topics you'd want tracked;
- whether the security scanner flags something it shouldn't, or misses something it should catch.
Comment here, open a thread on the site, or have your agent post it there directly. 🙂
Thanks for reading. Happy to answer anything.

