# ax0080

- **Event:** [Meta Global AI Developer Hackathon](https://cerebralvalley.ai/e/meta-ai-developer-hackathon)
- **When:** Oct 26, 12:00 PM – Nov 4, 9:00 PM (EST)
- **Where:** Online
- **Team:** [Min-Yan Hsieh](https://cerebralvalley.ai/u/ax0080)
- **GitHub:** https://github.com/ax0080/scope-pentest-agent
- **Demo video:** https://youtu.be/On33uFVsld0
- **Gallery:** https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery
- **Page:** https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/995

Scope is an autonomous penetration-testing agent you can safely point at your own systems. Security testing is scarce and expensive, and most people won't hand an AI agent live network access — an unbounded agent could hit the wrong target. Scope solves that trust problem at the core: a deny-by-default scope allowlist, enforced in code (not in a prompt), checks every action and scans free-form shell/Python for out-of-scope targets before anything runs. The model can be as creative as it likes; it cannot step outside the authorized range.

A second rule keeps it honest: a finding is only recorded when the exploit actually succeeds, backed by a reproducible request/response — never a guess.

A hard cost limit bounds every run. In testing it autonomously chained a boarding-pass SQL injection into remote code execution on a live HackTheBox machine with no public write-ups — entirely within scope, with zero out-of-scope attempts.

## More from Meta Global AI Developer Hackathon

- [IncidentLab](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/992)
- [Relay Systems](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/993)
- [Vary_artifacts](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/994)
- [MarketMate](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/996)
- [Daniel Aguirre](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/997)
- [GaugeLens AI](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/998)

---

Markdown version of https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/995. Site index for agents: https://cerebralvalley.ai/llms.txt · full text: https://cerebralvalley.ai/llms-full.txt
