← All reportsPublic report

panniantong/agent-reach

Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

75k stars Python View on GitHubprofiled 11d ago
Try GitZoid
61PRs this week
8Contributors
0Deps scanned
0Issues found
01 · Repo overview

How agent-reach is put together

Agent Reach is a Python 3.10+ CLI capability layer that gives AI agents internet-reading abilities by selecting, installing, health-checking, and routing to upstream tools rather than performing reads itself. Its core pattern is one 'channel' module per platform (web, twitter, youtube, github, bilibili, reddit, facebook, instagram, xiaohongshu, linkedin, rss, exa_search, v2ex, xueqiu, xiaoyuzhou), each probing an ordered list of preferred/fallback backends and reporting fixes via 'agent-reach doctor'. Configuration and credentials live in ~/.agent-reach/config.yaml with hardened symlink-rejecting private-file I/O, and an optional MCP server exposes doctor/status. The stack is pure Python packaged with hatchling, using requests/yt-dlp/feedparser for network and pyyaml for config; there is no server framework or database.

Languages

Python

Frameworks

MCP (Model Context Protocol) server SDKRich (CLI output)loguru (logging)

Datastores

YAML config file at ~/.agent-reach/config.yaml (no database)

Infrastructure

mcporter/MCP integrationPlaywright (optional browser extra)external CLI tools (gh, yt-dlp, twitter-cli, OpenCLI, bili-cli)

Major components

channels

Per-platform modules that probe an ordered list of upstream backends and report which is currently usable.

config

Manages ~/.agent-reach/config.yaml with atomic, owner-only, symlink-rejecting reads/writes and feature-requirement checks.

doctor/probe

Diagnoses each channel's backend availability and produces fix prescriptions and status reports.

cli

Entry point (agent-reach) exposing install/doctor/configure commands.

backends

Shared backend adapters such as OpenCLI used across multiple channels.

integrations/mcp_server

Optional MCP stdio server exposing a get_status tool backed by doctor_report.

utils

Hardened path/private-file helpers, process execution, URL and text scrubbing utilities.

skill/guides

SKILL.md and per-platform setup guides that teach agents which upstream tools to call and how to configure them.

Over the past few weeks the project shifted from a big security-and-reliability hardening push to lighter housekeeping. Early August brought a large wave of fixes closing security gaps, improving Windows support, and making health checks and credential handling safer, followed by smaller updates to sponsor and partner information. The most recent weeks were purely cosmetic README fixes to keep the Star History chart working.

Week by week

2026-08-24Repaired the Star History chart embeds in the README so they display properly again.latest2 changes

Docs

Restored Star History chart

Fixed the broken Star History graphic embedded in the README so it shows up again.

Docs

Used a permanent chart access token

Swapped in a lasting access token so the Star History chart keeps loading over time.

2026-08-10Refreshed the sponsor information shown in the README.2 changes

Docs

Updated sponsor wording

Revised the sponsor description text in the README.

Docs

Updated sponsor list

Refreshed the list of sponsors displayed in the README.

2026-08-03A large batch of security hardening, bug fixes, Windows test coverage, and partner/README updates landed across many channels.6 changes

Fix

Closed remaining security gaps

Tightened trust boundaries and hid setup credentials to reduce the risk of sensitive data leaking.

Chore

Added Windows test coverage

Introduced tests that run correctly on Windows using Git Bash and proper text encoding.

Fix

Hardened web reader inputs

Added stricter checks on what the web reader accepts and returns to block unsafe requests.

Fix

Fixed data-source reliability issues

Corrected handling in the Xueqiu, V2EX, XHS, and transcription features so they fail safely and respect limits.

Fix

Improved install reliability

Prevented pulling in an unrelated package and made setup failures surface clearly instead of silently passing.

Docs

Updated partner section

Refreshed partner details in the README, including adding a new partner and trimming the copy.

2026-07-27Small fixes to the search skill and the V2EX connection handling.2 changes

Fix

Used correct search tools

Pointed the skill at the properly registered Exa search tools.

Fix

Recovered from V2EX connection drops

Made the V2EX feature recover gracefully when its secure connection unexpectedly closes.

2026-07-20A priority hardening push made diagnostics safe and read-only, tightened credential handling, and added channel test coverage.6 changes

Fix

Made health checks truthful and read-only

Ensured the diagnostic and doctor tools only inspect the system without changing anything.

Fix

Enforced least-privilege credentials

Tightened how credentials are set up and stored so setup fails safely on errors.

Fix

Bounded media processing

Made transcription reject oversized media before processing to avoid overload.

Fix

Aligned YouTube tooling

Installed required defaults and matched yt-dlp support so YouTube features work reliably.

Chore

Added channel test coverage

Merged new tests for the V2EX, Xueqiu, Reddit, web, and RSS channels.

Docs

Updated capability descriptions

Refreshed the BrowserAct description and cookie-authentication guidance in the docs.

03 · Security check

Dependencies and code review

0 dependencies scanned

Dependency advisories

Security Watch

No known advisories across 0 scanned dependencies.

No known advisories in the scanned dependencies.

Code review

No concrete code-level issues confirmed.

Get this report every week for your repos.

GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.

$19 a month, flat · First 10 outputs free · No card required