A GitHub fork adapts a vulnerability-discovery harness for Codex, with static review skills on one side and a Docker, ASAN, gVisor, egress-proxied execution pipeline on the other. Worth a look because it is careful about the unglamorous boundary between a demo workflow and a turnkey scanner, which is exactly where these agent-security contraptions usually start wearing a false moustache.