Try this on day one: check package vulnerability reports
“Check these package versions for reported vulnerabilities and summarize the matching advisories.”
- Matching vulnerability list
- Advisory summaries
Integrations · Developer
An AI team that works in OSV for you.
Your bots check OSV for reported software vulnerabilities, read advisory details, and review package version information. New bots start on Ask, so they check with you before they act in OSV, except on Hermes and other ACP engines.
Free app. OSV connects through Flux Router credits or your own connected-apps key. You sign in to OSV yourself.
Check these package versions for reported vulnerabilities and summarize the matching advisories.
You signed in to OSV once. Your Chief put a bot on it.
- Check packages for reported vulnerabilities
- Read vulnerability details
- Review version information and import findings
What your bots can do in OSV.
- Check packages for reported vulnerabilities
- Read vulnerability details
- Review version information and import findings
“Asks first” means the bot checks with you before it does that, on Ask, the mode every new bot starts in. You can give a bot more freedom later. On Full access, a bot stops before messaging anyone new, posting publicly, paying, or deleting outside its folder, unless you have allowed it for that task. On Hermes and other ACP engines, Ask and the stop line cover only what the engine asks Murage about, and Hermes doesn’t ask before connected-app tools, so these actions don’t ask first there.
No ready-made team yet? Ask for one.
Tell your Chief of Staff what you want done in OSV, in plain words. It builds a team for the job, starting from the closest one in the library, and shows you who is on it before anyone starts.
How to connect it.
- 1
Download Murage
Free for Mac, Windows and Ubuntu. Pick the AI you already use; if it needs installing, Murage opens a one-line command for you.
- 2
Connect OSV
Open connected apps and sign in to OSV once. It runs through Flux Router credits, or your own connected-apps key.
- 3
Give a brief
Tell your Chief of Staff what to do with OSV. New bots start on Ask, so they check with you before they act, except on Hermes and other ACP engines.
What a Murage team adds in OSV.
What a team adds here
Your team reads what shipped or broke and writes it up for the people who need to know.
Works across your apps
One brief can pull from OSV, your calendar, your CRM and the web, then hand you one answer.
Keeps notes on your business
Your bots keep notes on your customers, your tone and how you like things done, stored on your computer where you can open and edit them.
Runs on the AI you already pay for
Claude Code, Codex, Hermes, a model key or a local model. The Murage app is free; your AI provider bills you as usual.
Questions about Murage and OSV.
Can Murage connect to OSV?
Yes. Sign in to OSV once inside Murage, through Flux Router credits or your own connected-apps key, and your bots can check packages for reported vulnerabilities.
Will it change or send anything in OSV without asking?
Not while it’s on Ask, where every new bot starts: it checks with you before it acts in OSV. On Auto or Full access, replies in an existing conversation and routine edits go ahead, but a bot still stops before messaging anyone new, posting publicly, paying, or deleting outside its folder, unless you have allowed it for that task. Only No limits turns that off. On Hermes and other ACP engines, Ask and the stop line cover only what the engine asks Murage about, and Hermes doesn’t ask before connected-app tools.
What does it cost?
The Murage app is free. OSV connects through Flux Router credits, or your own connected-apps key if you have one. Your AI provider bills you as usual.
OSV and the other product names and logos on this page are trademarks of their respective owners. Murage is not affiliated with or endorsed by them; the names and logos are used only to identify the apps and engines Murage works with.
Give your first job to Murage.
Download the free app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.
No account needed · Runs on the AI plan you already pay for