OPEN SOURCE
Yak Project Open Source
From programming languages and static code analysis to AI Agent security, Yak Project distills its core capabilities into a series of open-source projects. Click any card to open the corresponding site in a new tab.
Each topic includes runnable .yak examples and validation tools, enabling agents to write, debug, and verify Yaklang scripts and handle real-world MITM, Web Fuzzer, and global hot-reload scenarios.
Covers Web, API, authentication, privilege escalation, reverse engineering, cryptography, and AI/LLM security, packaging security knowledge into installable, searchable, composable standard Skills.
Lets agents like Codex, Claude Code, and Cursor compile source code, track data flows, and perform static security analysis for Java, PHP, JavaScript, Go, Python, C, and Yak.
Organizes feedback, stability, and black-box experimentation into reusable agent design methods for task planning, tool use, error correction, and feedback-loop design.
Includes standard library usage, practical cases, articles, scripts, and evaluation materials, providing structured references for agents learning Yaklang, generating security scripts, and retrieving language usage.
Covers SyntaxFlow syntax, operators, NativeCall, rule examples, error handling, and RAG construction materials, supporting AI retrieval of SyntaxFlow knowledge and rule generation.
Maintains benchmark projects annotated with Source, Sanitizer, and Sink data-flow labels, evaluating scanners by complete data flow rather than single hit lines for regression testing, CI, and engine comparison.
Covers SSA queries, Use-Def chains, interprocedural analysis, and data-flow visualization, helping security engineers learn to describe vulnerabilities with declarative rules.
Includes planning and task graphs, ReAct loops, tool systems, long-term memory, execution review, and professional Focus Mode, providing unified agent orchestration and security tool execution foundation for the Yaklang ecosystem.
Includes instruction models, basic blocks, control flow, Phi, scopes, and program database, providing a unified program representation for multi-language code modeling, data-flow analysis, and IRify static analysis.
Compiles security rules into executable queries, performing pattern matching and data-flow analysis on SSA programs.
Uses unified compilation, single-pass scanning, and candidate verification for large-scale rule and network-traffic bulk matching, producing consistent results between pure Go and optional built-in SIMD backends.
Includes dependency file parsers and license analysis for Java, Go, Node.js, Python, PHP, Ruby, Rust, and C/C++, providing a unified foundation for dependency identification, SBOM, license checking, and supply-chain risk analysis.
Provides reproducible instances of SQL injection, XSS, SSRF, file upload, logic flaws, and component vulnerabilities, serving as a locally authorized target for Yakit practice, plugin validation, AI agent security evaluation, and teaching.
Supports .class, .jar, .war decompilation, class structure parsing, and Java serialization/JSON conversion without JDK, cgo, or native runtime libraries. Can be used as a single-binary tool or embedded into other Go projects.
Supports static and dynamic linking and provides JIT-related interfaces, offering a portable, self-contained LLVM integration for the Yaklang ecosystem and reducing reliance on system LLVM.
Supports session creation, SSE event streams, model settings, review policies, and task cancellation, bringing Memfit AI interactive task execution to the terminal for automation workflows and remote agent debugging.
Covers security tools, dependency sync, SCA rule generation, log analysis, and plugin maintenance, providing readable, runnable, and adaptable Yaklang automation examples.
Provides syntax highlighting, completion, parameter hints, diagnostics, debugging, and quick run, bringing Yaklang LSP, DSP, and engine management capabilities into general-purpose code editors.
Simplifies switching among browser, system proxy, and Yakit, providing a browser-side entry point for Web security testing.
Versions libpcap headers, static libraries, and dynamic libraries by version and architecture in the repository, resolving system libpcap version differences, cross-compilation, and domestic architecture adaptation issues to provide stable dependencies for Yaklang packet capture, scanning, and network stack capabilities.