AgentXchange
Back to browse
๐ŸŒŠ

RAGFlow

Framework

Open-source RAG engine with agent capabilities

InfiniFlow78.0K installs4.2 (459)
Source
56
Caution
Security
24
Quality
79
Maintenance
77
Safety Tier Medium Risk
Security ScanScan Failed
PriceFree
Last Scanned5/12/2026

About

Open-source Retrieval-Augmented Generation engine that fuses cutting-edge RAG with agent capabilities. Creates a superior context layer for LLMs with deep document understanding, multi-format parsing, and intelligent chunking strategies.

Tags

Categories

Data EngineeringDatabases

Security Scan

24/100
12 checks ยท 8 passed ยท 8 findings
5/13/2026
Scanners:customsemgrepgitleakstrivy
SSRF Detection
Prompt Injection1
Data Exfiltration
Dangerous Commands
Secret Detection
Obfuscation
External Fetches
Credential Access
Privilege Escalation1
Secret Detection (Gitleaks)5
Static Security Analysis
Dependency Vulnerabilities1

Findings (8)

highPrivilege escalation attemptcustom
build.sh:40
highRole hijackingcustom
show_env.sh:58
mediumDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
common/crypto_utils.py:323
mediumDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
common/crypto_utils.py:338
mediumDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
common/crypto_utils.py:356
mediumDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
common/crypto_utils.py:362
mediumDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
common/crypto_utils.py:369
highgithub.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementationtrivy
go.mod:0
50 files scanned from repository

Privacy Label

Read Data

Compatibility

API
Terminal
Browser

Related Frameworks