by DeepMyst
AI coding dream team of agents for VS Code. Claude Code + openai Codex collaborate in brainstorm mode, debate solutions, and synthesize the best approach for your code.
# Add to your Claude Code skills
git clone https://github.com/DeepMyst/MystiLast scanned: 5/2/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@typescript-eslint/eslint-plugin: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/parser: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/type-utils: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/typescript-estree: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/utils: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "exceljs: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "prismjs: PrismJS DOM Clobbering vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "terser-webpack-plugin: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
},
{
"type": "npm-audit",
"message": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"severity": "low"
}
],
"status": "WARNING",
"scannedAt": "2026-05-02T06:08:06.882Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Mysti now supports 12 AI providers — added OpenCode, Qwen Code, Ollama, and LocalAI alongside Claude Code, Codex, Gemini, GitHub Copilot, Cline, Cursor, OpenClaw, and Manus. Run local models with Ollama/LocalAI or use cloud providers like OpenCode and Qwen Code. Each provider has its own authentic logo in the UI.
Alibaba's AI coding CLI with deep reasoning capabilities. Uses the same streaming protocol as Claude Code for seamless integration. Supports Qwen3 Coder models with plan, auto-edit, and yolo approval modes.
Multi-backend coding agent supporting Anthropic, OpenAI, Google, and Groq through a single CLI. Uses your configured default model — no lock-in to specific providers.
Run AI models locally with Ollama and LocalAI — no cloud subscription needed. Full privacy, zero latency, complete control over your models.
18 stability fixes across brainstorm mode and @-mention tagging — silence-based timeouts, auth pre-checks, convergence guards, mention limits, and retry cleanup. Plus 360 automated tests via vitest ensuring reliability across all features.
spawn EINVAL error with auto shell mode (#14)mysti.codexPath setting (#26)From VS Code: Press Ctrl+P (Cmd+P on Mac), then paste:
ext install DeepMyst.mysti
Or install from the VS Code Marketplace
Mysti works with the AI coding tools you already have. No extra subscriptions needed.
| Provider | Best For | |----------|----------| | Claude Code | Deep reasoning, complex refactoring, thorough analysis | | Codex | Quick iterations, familiar OpenAI style | | Gemini | Fast responses, Google ecosystem integration | | GitHub Copilot | Multi-model access (Claude, GPT-5, Gemini) via GitHub subscription | | Cline | Plan/Act mode, structured task completion | | Cursor | Auto model selection, multi-model with Claude, GPT-5, Gemini | | OpenClaw | Real-time WebSocket streaming, configurable thinking levels | | OpenCode | Multi-backend agent (Anthropic, OpenAI, Google, Groq) | | Qwen Code | Alibaba's AI coding agent, deep reasoning | | Ollama | Local LLM inference, privacy-first, no subscription | | LocalAI | Self-hosted AI models, full control |
Switch providers with one click. No lock-in.
| vs Copilot/Cursor | Mysti Advantage | |-------------------|-----------------| | Single AI | Multi-agent brainstorming — two AIs collaborate with 5 strategies | | Locked to one provider | 12 providers — Claude, Codex, Gemini, Copilot, Cline, Cursor, OpenClaw, Manus, OpenCode, Qwen, Ollama, LocalAI | | Black box | Full permission control — read-only to full-access | | Generic responses | 16 personas — architect, debugger, security expert... | | Manual workflow | Autonomous mode — AI works independently with safety controls | | No cross-agent routing | @-mentions — route tasks to specific agents inline |
Want a second opinion? Enable Brainstorm Mode and let two AI agents tackle your problem together. Choose any 2 of 12 agents from the settings panel.
| Strategy | Roles | Best For | |----------|-------|----------| | Quick | Direct synthesis | Simple tasks, fast answers | | Debate | Critic vs Defender | Architecture decisions, trade-offs | | Red-Team | Proposer vs Challenger | Security reviews, edge case discovery | | Perspectives | Risk Analyst vs Innovator | Greenfield design, technology selection | | Delphi | Facilitator vs Refiner | Complex problems, reaching consensus |
Claude Code (Anthropic), Codex (OpenAI), Gemini (Google), GitHub Copilot, Cline, Cursor, OpenClaw, OpenCode, Qwen Code (Alibaba), Ollama, and LocalAI have different training, different strengths, and different blind spots. When any two work together:
It's like having a senior dev and a tech lead review your code—except they actually discuss it first.
During discussions, Mysti tracks agent agreement and position stability. When auto-convergence is enabled, the discussion exits early once agents reach consensus — saving time without sacrificing quality.
Configure which two agents collaborate in the Settings Panel:
| Combination | Best For | |-------------|----------| | Claude + Codex | Deep analysis meets rapid iteration | | Claude + Gemini | Thorough reasoning with fast validation | | Claude + Copilot | Compare native Claude vs Copilot's multi-model approach | | Cursor + Gemini | Multi-model flexibility with Google integration | | OpenClaw + Claude | WebSocket streaming with deep reasoning | | Qwen + Claude | Compare Alibaba and Anthropic reasoning | | OpenCode + Gemini | Multi-backend flexibility with Google speed | | Ollama + Claude | Local privacy meets cloud intelligence |
When the AI presents multiple implementation approaches, Mysti automatically detects them and lets you choose your preferred path.
Requires at least 2 CLI tools installed. See Requirements.
Let the AI work independently with configurable safety controls:
[Full Autonom