coldpass

Browse / Agent tools

dannyisbad/agrep

Local, ranked search and memory for AI coding-agent history

  • memory
  • search

Works.Tested on 2026-10-28. From the README alone, on Linux with Haiku and Linux with Luna.

Share card: dannyisbad/agrep works
The card X shows when you post.Download

What we checked

Does it run from the README?Yes. Running in 3:21 on a clean Linux box.The run
Does it do what the README says?1 of 1 claims held up.Evidence

“Keyword search finds matching conversation context”

Expected The copper lantern manifest names the amber gate and west dock.. Got The copper lantern manifest names the amber gate and west dock..

Which setups did we try?Works with Haiku, Luna.Setups

Linux / Haiku: works, Oct 28, rev ac4efad. Linux / Luna: works, Oct 28, rev ac4efad.

Needs keys, a login or a browser?No.Details

None seen

Is it safe to run?Made outbound HTTPS connections: yes (hosts not recorded) by <guest-path>What we saw

Review signals across current setups: connection review. 12 listed items (named-host connections, static matches, dependency advisories) are below and do not change this verdict. 10 static matches retained as context.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 8 distinct locations. 2 attributed processes.

Source contains download and execute; review its purpose. npm/bin.js

Gitleaks found a possible hardcoded secret; value withheld. crates/agrep-cli/src/index_lock.rs

OSV reports a known vulnerability in this dependency version. 4 distinct locations. 4 findings.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written; package managers (cargo) downloaded dependencies over HTTPS; wrote only to its own open file handles.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written; package managers (rustup-init) downloaded dependencies over HTTPS; resolver address lookups that send no data; wrote only to its own open file handles.

Full event, path and process lists for each observed setup:

A quiet run is not a safety guarantee.

Is it maintained?Maintained · 82 commits in 90 days · 0 merged PRs in 90 days · 0 open issues · 0 open PRsActivity

actively maintained: last commit 0 days ago; 82 commits and 0 merged PRs in 90 days; 0 open issues, 0 open PRs; latest release 2026-10-28

Recent commits on GitHub

Can I show this on my README?Copy the badge.Badge
![coldpass](https://coldpass.dev/badge/dannyisbad--agrep.svg)

The run

Oct 28 · rev ac4efad
0:000:301:001:302:002:303:003:21

Independent test, not endorsed by the project.