Unreleased development software — not a supported security product or installer release.
Agent Smith is ArkenSec's open-source security-research companion, developed as a focused fork of OMP. It is intended to work alongside your normal IDE/coding agent, not replace it.
The fixed product goal is a human-led agent/TUI with a managed local, full VM-backed broad Kali environment, both Kali MCP and HexStrike MCP, persistent separate projects, real interactive terminals, and useful CPU-only local reasoning while normal development tools remain active. The first supported release must cover Windows x86-64, Apple Silicon macOS and Linux x86-64, and all four workflow families:
- Web applications and APIs.
- Networks and infrastructure.
- Authorized exploitation and CTF labs.
- Reverse engineering and binaries.
These are release requirements, not a three-OS support or completed workflow-qualification claim. P1 establishes the fork's application identity/state, maintained development build and review/CI boundaries. The experimental Linux/KVM workspace route adds persistent VM projects, both MCP execution paths, project-bound authority, original evidence, interactive terminals and pinned CPU-local inference. Mechanism checks alone do not establish useful investigation quality or end-to-end P2 acceptance; see the development limits and roadmap.
Use the maintained development instructions. Do not run upstream global-install snippets or replace your existing omp installation. The application command is agent-smith; its own settings/state use .agent-smith and app-scoped overrides. No signed-in OMP, Claude, Codex or other account home is shipped or imported as setup.
Inherited tools can still execute on the host. Separate application state is not VM containment, target authorization, a safe sandbox, encryption or a supported production-security boundary. Develop only with synthetic/owned fixtures; do not load client material or assess live targets with this early build.
Provider adapters in the inherited source are not service entitlement. Only documented, permitted interfaces with the user's legitimate account may be qualified. No copied subscription tokens, provider-refusal evasion, required hosted account or silent remote assistance satisfies the local/offline requirements.
Upstream base: OMP v18.4.8, immutable commit 717f97f4d22b3d65c4a4eef6a744255d46f4d1a6. Upstream Git ancestry, MIT copyright/permission text and additional third-party notices are preserved. Agent Smith-owned additions are MIT-licensed; see LICENSE, NOTICE and THIRD-PARTY-NOTICES.txt.
Internal upstream workspace/package identifiers and historical documentation may retain OMP names. They identify origin and implementation, not an Agent Smith support promise or instructions to use another project's release infrastructure. Native dependencies, Kali/tool images, models, firmware and rules have separate rights and qualification requirements. Nothing here claims they are all MIT or already bundled.
The source-origin and rights inventory records retained notices, concrete dependency exceptions and inherited upstream material retained by an explicit maintainer decision, with a contact route for rights holders. The root MIT license, a successful local build or a scanner result does not clear inherited third-party rights.
This is an independent ArkenSec project, maintained by @davidsly4954 under ArkenSecAI. The name is not an affiliation or endorsement claim. No third-party character art, logos or proprietary branding assets are supplied as Agent Smith branding.
- Contribution and exact-pin review policy.
- Private vulnerability reporting and current security limits.
- Milestones and support boundaries.
Do not put credentials, customer evidence or vulnerability details in public issues. Public source publication is separate from a supported release; no supported v1 is claimed before full qualification and the release gate.