AI use cases Coding agents
Coding agents
AI agents that read your codebase, edit files, run commands and handle git for you, from the terminal, an editor or a desktop app.
- Tracked tools
- 14
- Highest score
- 70
- Caution labels
- 10
- Use cases
- 8
- 1Gemini CLI#4 overall · AI tool70Caution
- 2OpenCode#5 overall · AI tool70No issues found
- 3OpenHands#10 overall · Agent framework68Caution
- 4Claude Code#11 overall · AI tool65No dependencies scanned
- 5Cline#12 overall · AI tool65Caution
- 6Codex#16 overall · AI tool58Caution
- 7deepseek-harness#17 overall · AI tool57Caution
- 8KiroCrew#27 overall · AI tool52Caution
- 9magpie#28 overall · AI tool51No issues found
- 10Continue#43 overall · AI tool37Caution
- 11goose#44 overall · AI tool36Caution
- 12Aider#45 overall · AI tool31Caution
- 13codex-plugin-cc#48 overall · Plugin29No issues found
- 14Roo Code#51 overall · AI tool23Caution
What you can do
AI agents that read your codebase, edit files, run commands and handle git for you, from the terminal, an editor or a desktop app. For developers who want to hand off routine coding tasks, refactors or code review to an AI pair programmer.
- AI pair programming in the terminal5 toolsgemini-cli 70
- AI code review4 toolsclaude-code 65
- AI refactoring and code migrations4 toolsOpenHands 68
- AI test writing4 toolsclaude-code 65
- AI debugging with an agent4 toolsOpenHands 68
- AI documentation generation4 toolsgemini-cli 70
- AI for GitHub issues and pull requests4 toolsOpenHands 68
- Up-to-date library docs for AI coding4 toolsclaude-code 65
Pick by situation
Based only on measured data for the 14 tracked tools here.
- Gemini CLIFits if you want the highest overall score (score 70, #4 of 52 overall)
- KiroCrewFits if active maintenance matters most (last push 2 Nov 2026, maintenance 92)
- deepseek-harnessFits if you want the most widely adopted option (268,675 stars, 32,612 forks)
- Gemini CLIFits if you want the most thorough README docs (docs score 69, 13,456-character README)
- OpenCodeFits if you need a permissive license and a clean scan (MIT, no issues found by automated scan)
Short answer
Of the 14 tools we track in Coding agents, the highest scored this week are Gemini CLI (70), OpenCode (70), OpenHands (68), Claude Code (65) and Cline (65). Safety labels in this category: 3 no issues found, 1 no dependencies scanned, 10 caution. “No dependencies scanned” (Claude Code) means the code checks found nothing but there was no runtime lockfile to check. These agents read your codebase, edit files and run commands for you. We say “highest scored”, not “best”: the score summarises public maintenance, adoption and docs signals, and nobody here tested them hands-on.
Read the full answer
Pick by situation
- Highest overall score: Gemini CLI (70, #4 of 52 overall, #1 in Coding agents).
- Open-source alternative to Claude Code that scores higher this week: Gemini CLI (Apache-2.0), OpenCode (MIT) and OpenHands (MIT). OpenCode vs Claude Code · Gemini CLI vs Claude Code
- Open source with no scan findings: OpenCode (MIT, no issues found), magpie (MIT, no issues found) and codex-plugin-cc (Apache-2.0, no issues found).
- Most GitHub stars: deepseek-harness (268,675).
- Check before new projects: Aider (no push since 22 May 2026) and Roo Code (archived).
- Not open source: Claude Code: Proprietary (Anthropic Commercial Terms).
Watch out: Gemini CLI, OpenHands and goose ship a skill or agent instruction file that tells the agent to pipe a remote script into a shell. When an agent follows it, it runs code from the internet with your permissions. A “critical” OSV advisory means a known issue exists for a package version in a lockfile; it does not prove the tool is exploitable in your setup.
What to watch out for
Scores are relative public signals; none of these tools were tested hands-on.
- CautionGemini CLI9 critical-severity known vulnerabilities in runtime dependencies (OSV)
- No issues foundOpenCodeNo issues found in this week’s scan
- CautionOpenHandsSkill/agent file instructs piping a remote script into a shell: .agents/skills/frontend-development/references/guide.md
- No dependencies scannedClaude CodeCode checks clean, no lockfile to check
- CautionCline13 critical-severity known vulnerabilities in runtime dependencies (OSV)
- CautionCodex4 critical-severity known vulnerabilities in runtime dependencies (OSV)
- Cautiondeepseek-harness7 critical-severity known vulnerabilities in runtime dependencies (OSV)
- CautionKiroCrew2 critical-severity known vulnerabilities in runtime dependencies (OSV)
- No issues foundmagpieNo issues found in this week’s scan
- CautionContinue36 critical-severity known vulnerabilities in runtime dependencies (OSV)
- Cautiongoose8 critical-severity known vulnerabilities in runtime dependencies (OSV)
- CautionAider18 critical-severity known vulnerabilities in runtime dependencies (OSV)
- No issues foundcodex-plugin-ccNo issues found in this week’s scan
- CautionRoo Code13 critical-severity known vulnerabilities in runtime dependencies (OSV)
- License to check before commercial use: Claude Code (Proprietary (Anthropic Commercial Terms)).
All scan reasons
- Gemini CLI: 9 critical-severity known vulnerabilities in runtime dependencies (OSV); Skill/agent file instructs piping a remote script into a shell: .gemini/skills/agent-tui/SKILL.md — curl -fsSL https://raw.githubusercontent.com/pproenca/agent-tui/master/install.sh | sh
- OpenHands: Skill/agent file instructs piping a remote script into a shell: .agents/skills/frontend-development/references/guide.md — curl -LsSf https://astral.sh/uv/install.sh | sh
- Claude Code: code and instruction-file checks found nothing, but there is no runtime lockfile or manifest, so dependencies were not checked
- Cline: 13 critical-severity known vulnerabilities in runtime dependencies (OSV)
- Codex: 4 critical-severity known vulnerabilities in runtime dependencies (OSV)
- deepseek-harness: 7 critical-severity known vulnerabilities in runtime dependencies (OSV)
- KiroCrew: 2 critical-severity known vulnerabilities in runtime dependencies (OSV)
- Continue: 36 critical-severity known vulnerabilities in runtime dependencies (OSV)
- goose: 8 critical-severity known vulnerabilities in runtime dependencies (OSV); Skill/agent file instructs piping a remote script into a shell: crates/goose/src/skills/builtins/web_search.md — curl -LsSf https://astral.sh/uv/install.sh | sh
- Aider: 18 critical-severity known vulnerabilities in runtime dependencies (OSV)
- Roo Code: 13 critical-severity known vulnerabilities in runtime dependencies (OSV); Repository archived
Full table
Open the sortable table
| Tool (overall rank) | Use case | Score | Safety | Last push | Stars |
|---|---|---|---|---|---|
| 4 Gemini CLIgoogle-gemini/gemini-cliGoogle's open-source AI agent that brings Gemini into your terminal. | Coding agents | 70 | Caution | ★ 108,661 | |
| 5 OpenCodeanomalyco/opencodeOpen-source coding agent for the terminal (formerly sst/opencode). | Coding agents | 70 | No issues found | ★ 223,907 | |
| 10 OpenHandsOpenHands/OpenHandsOpen-source platform for AI-driven software development agents. | Coding agents | 68 | Caution | ★ 92,466 | |
| 11 Claude Codeanthropics/claude-codeAnthropic's terminal coding agent that understands your codebase, runs routine tasks, explains code and handles git via natural language. | Coding agents | 65 | No dependencies scanned | ★ 154,199 | |
| 12 Clinecline/clineAutonomous coding agent available as an SDK, IDE extension or CLI. | Coding agents | 65 | Caution | ★ 71,190 | |
| 16 Codexopenai/codexOpenAI's lightweight coding agent that runs in your terminal. | Coding agents | 58 | Caution | ★ 132,785 | |
| 17 deepseek-harnessdeepseek-ai/deepseek-harnessDeepSeek's official agent harness built around plugins. | Coding agents | 57 | Caution | ★ 268,675 | |
| 27 KiroCrewkirodotdev/KiroCrewPersistent workspace for development work that continues beyond a single agent session. | Coding agents | 52 | Caution | ★ 4,717 | |
| 28 magpieyetone/magpieMenu-bar app to switch which model your coding agents use (e.g. Codex on DeepSeek). | Coding agents | 51 | No issues found | ★ 27,879 | |
| 43 Continuecontinuedev/continueOpen-source coding agent for your editor and CI. | Coding agents | 37 | Caution | ★ 36,397 | |
| 44 gooseaaif-goose/gooseOpen-source, extensible AI agent that installs, runs, edits and tests code with any LLM. | Coding agents | 36 | Caution | ★ 56,107 | |
| 45 AiderAider-AI/aiderAI pair programming in your terminal that edits code in your local git repo. | Coding agents | 31 | Caution | ★ 49,889 | |
| 48 codex-plugin-ccopenai/codex-plugin-ccOfficial plugin to use Codex from inside Claude Code for code review or delegated tasks. | Coding agents | 29 | No issues found | ★ 34,797 | |
| 51 Roo CodeRooCodeInc/Roo-CodeEditor extension that gives you a team of AI coding agents inside VS Code. | Coding agents | 23 | Caution | ★ 24,257 |
Score = relative rank (percentile) among all 52 tracked tools on maintenance, adoption and docs. Community signal is not measured yet. How we score.
Get the board every Monday
One email a week: the new top 10, the biggest score changes and every safety label that changed.
Free. Double opt-in: you confirm by email first, unsubscribe in one click.