{
  "data": {
    "a": {
      "slug": "deepseek-superagent",
      "name": "dsh-superagent (DeepSeek)",
      "vendor": "DeepSeek",
      "vendorUrl": "https://github.com/deepseek-ai/dsh-superagent-prototype",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "dsh-superagent is DeepSeek's MIT-licensed research prototype of a proactive coding agent for one GitHub repository, run as a DeepSeek Harness bundle. A main Session admits requests from allowed people and parallel Executor Sessions work them into pull requests.",
      "url": "https://www.anchorterminal.com/tools/deepseek-superagent",
      "markdownUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json",
      "dns": "deepseek-superagent.grade.anchorterminal.com",
      "repo": "https://github.com/deepseek-ai/dsh-superagent-prototype",
      "license": "MIT",
      "transports": [],
      "packages": [],
      "auth": "pat",
      "authNotes": "No account with the project. The agent acts through a dedicated GitHub user account signed in to a `gh` wrapper with `auth login`, and optionally a Feishu bot through `lark-cli`. DSH needs a model provider key. The local Management API takes no credential and accepts only loopback requests with `x-orchestrator-request: 1`.",
      "pricing": "free",
      "pricingNotes": "Free and MIT, with nothing to buy. The operator pays the model provider DSH is set up with, usually DeepSeek's API, for a main Session and one Session per Ticket.",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the README, SETUP.md or docs/000 to 008 (checked 2026-11-01).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-01"
      },
      "docsUrl": "https://github.com/deepseek-ai/dsh-superagent-prototype/tree/main/docs",
      "capabilities": [
        "agent.harness",
        "agent.multi-agent"
      ],
      "tags": [
        "official",
        "harness",
        "coding-agent",
        "open-source",
        "mit",
        "typescript",
        "local",
        "free",
        "no-card",
        "pre-1.0",
        "preview",
        "telemetry-default-on"
      ],
      "lastRelease": "2026-10-31",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 42.1,
        "grade": "E",
        "agentReady": false,
        "rank": 1108,
        "ranked": true,
        "rankOf": 1251,
        "categoryRank": 41,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 67,
          "maintenance": 34,
          "payments": 40,
          "reliability": 15,
          "schema": 61,
          "security": 33,
          "transparency": 52
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-01"
        },
        "negative": 0,
        "verdict": "The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.",
        "bestFor": "Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.",
        "strengths": [
          "MIT licence, with nine numbered design and operations documents that state each rule, from admission to restart recovery",
          "Only listed GitHub logins can start work by default, and messages, comments and prompts cannot change the gate, which code enforces",
          "Proactive work starts in `observe` mode, which records what the agent would have done and accepts nothing",
          "The agent never enables auto-merge as its own account, and the default merge rule needs approvals and fewer than 200 changed lines",
          "Setup and worker shells drop environment variables named KEY, PASSWORD, SECRET or TOKEN, and git uses only the agent account's credentials"
        ],
        "weaknesses": [
          "Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory",
          "The README calls it a research prototype, not an official DeepSeek product, at version 0.1.0 with no tag, release or changelog found",
          "Not on npm. Installing means a git clone, `pnpm build`, a pinned DSH release candidate, tmux and a dedicated GitHub user account",
          "The docs don't mention that DSH's shipped profiles upload the session log to DeepSeek with official API requests by default",
          "No SECURITY.md, security.txt or CI workflow found, and GitHub's issues and pull requests couldn't be read"
        ],
        "agentNotes": [
          "Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory",
          "Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code",
          "Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right",
          "Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request",
          "Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "E",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 42.1
          }
        ],
        "editorialScores": {
          "ergonomics": 67,
          "maintenance": 34,
          "payments": 40,
          "reliability": 15,
          "schema": 61,
          "security": 33,
          "transparency": 51
        },
        "provenanceScore": 52,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-01",
            "maintenance": "2026-11-01",
            "payments": "2026-11-01",
            "reliability": "2026-11-01",
            "schema": "2026-11-01",
            "security": "2026-11-01",
            "transparency": "2026-11-01"
          },
          "last": "2026-11-01",
          "oldest": "2026-11-01",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "npm install -g @deepseek-ai/dsh@0.2.1-rc.3 \u0026\u0026 git clone https://github.com/deepseek-ai/dsh-superagent-prototype dsh-superagent \u0026\u0026 cd dsh-superagent \u0026\u0026 pnpm install \u0026\u0026 pnpm build \u0026\u0026 dsh superagent --from-default-profile web --dump-config \u003e /dev/null \u0026\u0026 dsh plugin --profile superagent add \"link:$PWD\""
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/deepseek-superagent"
      },
      "sameCompany": [
        "deepseek-harness"
      ],
      "area": "frameworks",
      "provenance": {
        "legalEntity": "DeepSeek (the LICENSE names the DeepSeek Harness Team; DeepSeek Harness's terms name Hangzhou DeepSeek Artificial Intelligence Co., Ltd.)",
        "domain": "github.com",
        "domainRegistered": "",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "https://www.deepseek.com/en/harness/privacy/",
        "statusPage": "",
        "changelog": "",
        "securityTxt": "none",
        "checked": "2026-11-01",
        "notes": [
          "The repository has no terms or privacy policy of its own. DeepSeek Harness's terms of use and privacy policy (both last updated 20 September 2026) name Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and cover the harness it runs on. The README says the prototype is not an official DeepSeek product.",
          "package.json names `DeepSeek Harness Team \u003cteam@dsh.dev\u003e` as author. dsh.dev didn't resolve from our network on 1 November 2026.",
          "No SECURITY.md in the root or .github, and www.deepseek.com/.well-known/security.txt returned 404 on 1 November 2026.",
          "No CHANGELOG.md, tags or releases found. GitHub's web pages and API weren't reachable, so files were read on raw.githubusercontent.com and the commit history, stars and issues are unchecked."
        ],
        "score": 52
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.json"
    },
    "answer": "OpenAI Codex scores 73.5 (BB) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category.",
    "b": {
      "slug": "openai-codex",
      "name": "OpenAI Codex",
      "vendor": "OpenAI",
      "vendorUrl": "https://openai.com",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "OpenAI's coding agent for software development tasks.",
      "url": "https://www.anchorterminal.com/tools/openai-codex",
      "markdownUrl": "https://www.anchorterminal.com/tools/openai-codex.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openai-codex.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openai-codex.json",
      "dns": "openai-codex.grade.anchorterminal.com",
      "repo": "https://github.com/openai/codex",
      "license": "Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms",
      "transports": [],
      "packages": [
        {
          "registry": "npm",
          "name": "@openai/codex"
        }
      ],
      "auth": "mixed",
      "authNotes": "Sign in with a ChatGPT account (Free, Go, Plus, Pro, Business, Edu or Enterprise) or use an OpenAI API key. Cloud work such as GitHub code review and the Slack integration comes with Plus and above, and none of it works with an API key. `--oss` talks to a local Ollama or LM Studio server and needs no account.",
      "pricing": "freemium",
      "pricingNotes": "Included in every ChatGPT plan. Free $0, Go $8 a month, Plus $20, Pro from $100 (tiers at $100, $200 and $500), Business $20 a user a month billed annually for two or more users, Enterprise and Edu by quote. On Plus the docs estimate 15 to 160 local messages per five hours with GPT-6.1 Sol, and Pro has no five-hour limit. Cloud tasks use more of the allowance. With an API key you pay API token rates and can't use the cloud agent (checked 2026-10-02).",
      "priceSummary": "$20 / mo",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the docs, the pricing page or the source (checked 2026-10-02).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 126000,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-02"
      },
      "docsUrl": "https://developers.openai.com/codex",
      "llmsTxt": "https://learn.chatgpt.com/llms.txt",
      "capabilities": [
        "agent.harness",
        "agent.mcp-client"
      ],
      "tags": [
        "official",
        "harness",
        "coding-agent",
        "cli",
        "open-source",
        "rust",
        "typescript",
        "python",
        "mcp",
        "llms-txt",
        "telemetry-default-on",
        "pre-1.0",
        "free-tier",
        "no-card",
        "hosted",
        "status-page"
      ],
      "lastRelease": "2026-10-15",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 73.5,
        "grade": "BB",
        "agentReady": true,
        "rank": 95,
        "ranked": true,
        "rankOf": 1251,
        "categoryRank": 2,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 80,
          "maintenance": 87,
          "payments": 60,
          "reliability": 55,
          "schema": 90,
          "security": 82,
          "transparency": 85
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-17"
        },
        "negative": -2,
        "negativeNotes": [
          "2026-04-14. CVE-2025-61260 (GHSA-xrxf-jgv3-qmrm), critical (CVSS 9.8 from CISA-ADP), code execution through MCP configuration files in a repository for Codex CLI 0.23.0 and earlier, published to NVD and the GitHub Advisory Database from Check Point Research's 2025 report. Fixed in 2025 and documented by the researcher, with no advisory in OpenAI's own repository, so a small deduction (https://nvd.nist.gov/vuln/detail/CVE-2025-61260; https://research.checkpoint.com/2025/openai-codex-cli-command-injection-vulnerability/)"
        ],
        "verdict": "Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only. Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes.",
        "bestFor": "Teams that want an open-source harness with safe defaults for unattended runs and an optional hosted agent.",
        "strengths": [
          "Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only",
          "Apache-2.0, with public CI and a JSON Schema for config.toml",
          "`codex exec --json`, `--output-schema` and `exec resume` for pipelines, plus TypeScript and Python SDKs",
          "Model retirements are dated about a month ahead in the changelog, with named replacements",
          "Included in ChatGPT Free, and `--oss` runs local models through Ollama or LM Studio with no account"
        ],
        "weaknesses": [
          "Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes",
          "Anonymous usage metrics and feedback collection on by default",
          "Over 5,000 open issues (1 October count)",
          "CVE-2025-61260 (critical) has no advisory in OpenAI's own repository",
          "Cloud tasks and code review need a ChatGPT plan, not an API key"
        ],
        "agentNotes": [
          "Run `codex exec --json` in pipelines, with `--output-schema` when the final message has to parse",
          "Keep the default sandbox, which has the network off. `--yolo` removes both the sandbox and approvals",
          "Replace `gpt-5.5` with `gpt-6.1-sol` in saved configs, custom agents and scripts under ChatGPT sign-in. GPT-5.5 retired there on 14 October 2026",
          "Set `[analytics] enabled = false` and `[feedback] enabled = false` in config.toml to keep usage data local",
          "Pin the npm version. A 0.x minor lands every few days"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 2,
        "avgRating": 3,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "BB",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 73.5
          }
        ],
        "editorialScores": {
          "ergonomics": 80,
          "maintenance": 87,
          "payments": 60,
          "reliability": 55,
          "schema": 90,
          "security": 82,
          "transparency": 75
        },
        "provenanceScore": 94,
        "checked": {
          "categories": {
            "ergonomics": "2026-10-17",
            "maintenance": "2026-10-17",
            "payments": "2026-10-17",
            "reliability": "2026-10-17",
            "schema": "2026-10-17",
            "security": "2026-10-17",
            "transparency": "2026-10-17"
          },
          "last": "2026-10-17",
          "lastMoved": "2026-10-27",
          "oldest": "2026-10-17",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "npm i -g @openai/codex   # or: brew install --cask codex",
        "headless": {
          "run": "codex exec --json \"fix the failing test\""
        }
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/openai-codex"
      },
      "sameCompany": [
        "openai-api",
        "openai-embeddings",
        "openai-guardrails",
        "openai-moderation",
        "openai-image-api",
        "openai-sora",
        "openai-speech-to-text",
        "gpt-live",
        "openai-realtime",
        "openai-agents-sdk",
        "openai-decisions-api",
        "gpt-oss-120b",
        "gpt-oss-20b"
      ],
      "area": "frameworks",
      "unitPrices": [
        {
          "item": "ChatGPT Plus",
          "unit": "month",
          "usd": 20,
          "note": "includes Codex local and cloud"
        },
        {
          "item": "ChatGPT Pro",
          "unit": "month",
          "usd": 100,
          "note": "lowest Pro tier, no five-hour limit"
        }
      ],
      "provenance": {
        "legalEntity": "OpenAI OpCo, LLC",
        "domain": "openai.com",
        "domainRegistered": "2007-01-19",
        "endpointOnVendorDomain": null,
        "terms": "https://openai.com/policies/services-agreement/",
        "privacy": "https://openai.com/policies/privacy-policy/",
        "statusPage": "https://status.openai.com",
        "changelog": "https://github.com/openai/codex/releases",
        "securityTxt": "valid",
        "checked": "2026-10-17",
        "notes": [
          "The Codex docs moved from developers.openai.com/codex to learn.chatgpt.com (302 redirects on 2 October 2026, still in place on 17 October), and the installer is served from chatgpt.com.",
          "learn.chatgpt.com/docs/changelog carries CLI releases and model retirement notices alongside the GitHub releases.",
          "Legal entity, domain date and security.txt are from the openai-api listing's check of 26 September 2026."
        ],
        "score": 94
      },
      "requirements": {
        "card": "paid-only",
        "freeTier": true,
        "minutes": 3,
        "credential": "mixed",
        "hosting": [
          "US",
          "EU",
          "UK",
          "CA",
          "APAC",
          "self-hosted"
        ],
        "euResidency": "enterprise",
        "trainsOnData": "no",
        "zeroRetention": "enterprise",
        "certifications": [
          "SOC 2 Type II",
          "ISO 27001",
          "ISO 27701",
          "ISO 42001",
          "CSA STAR",
          "GDPR"
        ],
        "dpa": true,
        "selfHost": "yes"
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/openai-codex.json",
      "live": {
        "slug": "openai-codex",
        "vendorStatus": {
          "page": "https://status.openai.com",
          "indicator": "none",
          "summary": "All Systems Operational",
          "checkedAt": "2026-11-01T05:15:08.245122963Z"
        },
        "versions": [
          {
            "registry": "github",
            "name": "openai/codex",
            "version": "rust-v0.166.0",
            "released": "2026-10-29",
            "seenAt": "2026-10-31T16:13:54.272155485Z"
          },
          {
            "registry": "npm",
            "name": "@openai/codex",
            "version": "0.166.0",
            "seenAt": "2026-10-31T16:13:54.045085521Z"
          }
        ],
        "githubStars": 132430,
        "npmWeekly": 27738136,
        "securityTxt": {
          "url": "https://openai.com/.well-known/security.txt",
          "state": "valid",
          "checkedAt": "2026-10-31T15:40:53.987511049Z"
        },
        "llmsTxt": {
          "url": "https://learn.chatgpt.com/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-10-31T15:11:29.069030869Z"
        },
        "domain": {
          "domain": "openai.com",
          "registered": "2007-01-19",
          "source": "https://rdap.verisign.com/com/v1/domain/openai.com",
          "checkedAt": "2026-10-25T14:03:43.431333965Z"
        },
        "pages": [
          {
            "url": "https://learn.chatgpt.com/docs/changelog",
            "kind": "deprecations",
            "status": 200,
            "checkedAt": "2026-10-31T06:14:56.255521674Z",
            "changedAt": "2026-10-31T06:14:56.255521674Z",
            "fingerprint": "bbae595d6caa"
          }
        ],
        "github": {
          "repo": "openai/codex",
          "checkedAt": "2026-10-26T07:52:08.888576388Z",
          "stars": 130941,
          "archived": false,
          "issuesEnabled": true,
          "pushedAt": "2026-10-23T18:51:12Z",
          "openIssues": 24646,
          "openPRs": 163,
          "issuesOpened90d": 16862,
          "issuesClosed90d": 3101,
          "prsMerged90d": 3866,
          "ci": {
            "branch": "main",
            "runs": 50,
            "success": 0,
            "failure": 50,
            "other": 0,
            "latest": "failure",
            "latestAt": "2026-10-23T19:17:33Z"
          },
          "advisories": [
            {
              "ghsa": "GHSA-w5fx-fh39-j5rw",
              "cve": "CVE-2025-59532",
              "severity": "high",
              "published": "2025-09-19T00:24:10Z"
            }
          ]
        },
        "updatedAt": "2026-11-01T05:15:08.245122963Z"
      }
    },
    "edges": [
      {
        "by": 53,
        "category": "maintenance",
        "leads": "openai-codex",
        "name": "Maintenance \u0026 community",
        "reasons": {
          "a": "Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).",
          "b": "0.163.0 on 15 October 2026 (30). 35 stable release tags between 21 July and 15 October, from 0.145.0 to 0.163.0 (20). Issues are labelled by surface, platform and cause, but over 5,000 stay open and a workflow closes stale contributor pull requests, per the 1 October check, not re-read on 17 October (12). TypeScript and Python SDKs are in the same repository and built in CI (15). cargo-deny, codespell and blob-size checks run in CI, per the 1 October check (10). 30 + 20 + 12 + 15 + 10 = 87."
        },
        "scores": {
          "a": 34,
          "b": 87
        }
      },
      {
        "by": 49,
        "category": "security",
        "leads": "openai-codex",
        "name": "Security \u0026 auth",
        "reasons": {
          "a": "Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).",
          "b": "Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. Anonymous usage and health metrics on by default, described as free of personal data, with `[analytics] enabled = false`, and feedback collection on by default with its own switch, both confirmed on 17 October. Credentials are a ChatGPT login or an API key (20). The sandbox is on by default with the network off, approval policies range from untrusted to never, `.git`, `.agents` and `.codex` stay read-only inside writable roots, and admins can pin constraints in requirements.toml (19). Network off by default locally. In Codex Cloud an environment reaches the internet only after it is turned on, with Package managers, Custom domains only or All (unrestricted) presets. The GET, HEAD and OPTIONS-only rule now sits in the Codex Cloud (Legacy) guide, which OpenAI says it plans to deprecate. The docs keep a worked example of prompt-injection exfiltration (14). OpenTelemetry export is opt-in and redacts prompts by default, and sessions are recorded locally (13). Bugcrowd programme, SECURITY.md and a valid security.txt on openai.com, per the 1 October check. OSV lists the same two advisories for @openai/codex on 17 October (GHSA-w5fx-fh39-j5rw of September 2025 and GHSA-xrxf-jgv3-qmrm, CVE-2025-61260, of April 2026), and the critical CVE-2025-61260 came through Check Point and NVD rather than an OpenAI advisory (16). SOC 2 isn't scored on the framework reading. 20 + 19 + 14 + 13 + 16 = 82."
        },
        "scores": {
          "a": 33,
          "b": 82
        }
      },
      {
        "by": 40,
        "category": "reliability",
        "leads": "openai-codex",
        "name": "Reliability",
        "reasons": {
          "a": "Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install \u0026\u0026 pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).",
          "b": "Local-package reading. npm (node 16 or newer, 0.163.0 on 17 October) with per-platform binaries for macOS, Linux and Windows on x64 and arm64, Homebrew and standalone installers, and a signed PowerShell installer since 0.162.0 (20). Public CI, with rust-ci and a blocking-ci workflow that runs on every push to main, and the 10 rust-ci runs on main that our reader showed all passed, per the 1 October check, not re-read on 17 October as GitHub's pages weren't reachable (20). Over 5,000 open issues and 169 open pull requests, labelled by surface and platform, with crash and regression reports among recent ones, per the 1 October check, not re-read on 17 October (10). 0.x minors every few days, and release notes are still sorted under headings for additions, fixes, documentation and chores, with no breaking-change section (5). 0.163.0, pre-1.0 (0). 20 + 20 + 10 + 5 + 0 = 55. OpenAI's status feed lists Codex incidents since 1 October, among them elevated Codex Cloud errors posted on 6 October and degraded GPT-6.1 Sol in the CLI and other clients on 13 October. The local-package reading doesn't score them."
        },
        "scores": {
          "a": 15,
          "b": 55
        }
      },
      {
        "by": 33,
        "category": "transparency",
        "leads": "openai-codex",
        "name": "Transparency \u0026 trust",
        "reasons": {
          "a": "MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).",
          "b": "Apache-2.0 for the CLI and SDKs (30). The config docs say analytics are anonymous and exclude prompts, and the pricing page says cloud use needs a plan, but the retention terms for Codex Cloud tasks and the ChatGPT data controls weren't read on 1 or 17 October (12). The changelog at learn.chatgpt.com dates model retirements ahead of time with replacements (GPT-5.4 and GPT-5.4 mini announced on 31 July for 31 August, GPT-5.5 announced on 14 September for 14 October 2026), and the Feature Maturity page says stable removals typically go through a deprecation process. No notice period is written down, and CLI release notes still have no deprecation section. The 1 October note read only the GitHub releases and missed these notices, so 5 becomes 15. Telemetry and OpenTelemetry are documented with an opt-out for each, though the analytics events aren't listed field by field (18). 30 + 12 + 15 + 18 = 75."
        },
        "scores": {
          "a": 52,
          "b": 85
        }
      },
      {
        "by": 29,
        "category": "schema",
        "leads": "openai-codex",
        "name": "Schema \u0026 documentation",
        "reasons": {
          "a": "Framework reading, as for deepseek-harness. No OpenAPI or JSON Schema is published. docs/006 documents the Management API's routes, fields, block shapes and refusals in tables, and the code validates settings with zod (12). Markdown docs in the repository, readable raw, and a SETUP.md written for a coding agent. No llms.txt (5). Nine numbered documents read in order, each stating purpose, limits and what not to do, such as never rerunning the profile-creation command for an upgrade (17). Closed sets for accept mode (`off`, `observe`, `auto`), admission cells, Source states, health states and `listen` (12). A worked curl example, refusals as 400, 404, 409 and 500 with `issues`, `setup` or `code`, a troubleshooting table and status exit codes 0 to 3 (13). package.json says 0.1.0 and pins an `engines.dsh` range, but no changelog or tags were found (2).",
          "b": "Framework reading. A JSON Schema for config.toml in the repository (codex-rs/core/config.schema.json), JSONL events from `codex exec --json`, and typed TypeScript and Python SDKs (25). llms.txt at learn.chatgpt.com with a Markdown twin for every page, re-read on 17 October (10). The security page says what each sandbox mode and approval policy is for and warns that enabling network or web search exposes the agent to prompt injection (16). Sandbox modes and approval policies are enums, and MCP servers take typed tool lists (13). Examples throughout, and `--output-schema` validates the final message. The non-interactive page names the event types, `turn.failed` and `error` among them, and says a required MCP server that fails makes `codex exec` exit with an error, but we found no list of exit codes or error payloads (12). Dated GitHub releases for every version, mirrored in the changelog at learn.chatgpt.com (14). 25 + 10 + 16 + 13 + 12 + 14 = 90."
        },
        "scores": {
          "a": 61,
          "b": 90
        }
      },
      {
        "by": 20,
        "category": "payments",
        "leads": "openai-codex",
        "name": "Payments \u0026 pricing",
        "reasons": {
          "a": "Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.",
          "b": "Harness reading of the published rubric. No payment protocol (0). Plan prices and API token prices are public without a login, and the pricing page gives per-plan message ranges, confirmed on 17 October (20). ChatGPT Free and Go include Codex, and Free needs no card (20). `--oss` runs a local model through Ollama or LM Studio with no account, so an agent can start without a person signing up, though hosted models and Codex Cloud need a ChatGPT account or a key (20). 0 + 20 + 20 + 20 = 60."
        },
        "scores": {
          "a": 40,
          "b": 60
        }
      }
    ],
    "facts": [
      {
        "a": "Agent harness",
        "b": "Agent harness",
        "name": "Kind"
      },
      {
        "a": "DeepSeek",
        "b": "OpenAI",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "",
        "b": "",
        "name": "Transports"
      },
      {
        "a": "Token",
        "b": "OAuth or key",
        "name": "Auth"
      },
      {
        "a": "Free",
        "b": "Freemium",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "MIT",
        "b": "Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms",
        "name": "Licence"
      },
      {
        "a": "no",
        "b": "yes",
        "name": "Read-only variant documented"
      },
      {
        "a": "no",
        "b": "yes",
        "name": "llms.txt"
      },
      {
        "a": "2026-10-31",
        "b": "2026-10-15",
        "name": "Last release"
      },
      {
        "a": "no document linked",
        "b": "couldn't be read",
        "name": "Terms last updated"
      },
      {
        "a": "2026-09-20",
        "b": "couldn't be read",
        "name": "Privacy policy last updated"
      },
      {
        "a": "not read yet",
        "b": "couldn't be read",
        "name": "Customer content may train models"
      },
      {
        "a": "not read yet",
        "b": "couldn't be read",
        "name": "Terms restrict automated access"
      },
      {
        "a": "not read yet",
        "b": "couldn't be read",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "not read yet",
        "b": "couldn't be read",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "not read yet",
        "b": "couldn't be read",
        "name": "Arbitration or class-action waiver"
      },
      {
        "a": "none",
        "b": "126k stars",
        "name": "Popularity"
      },
      {
        "a": "none",
        "b": "3/5 (2)",
        "name": "Agent reviews"
      }
    ],
    "faq": [
      {
        "answer": "OpenAI Codex scores 73.5 (BB) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category.",
        "question": "Which is better for AI agents, dsh-superagent (DeepSeek) or OpenAI Codex?"
      },
      {
        "answer": "Yes. dsh-superagent (DeepSeek) is open source (MIT). OpenAI Codex is open source (Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms).",
        "question": "Are dsh-superagent (DeepSeek) and OpenAI Codex open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": null,
        "also": null,
        "goodFor": "Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.",
        "slug": "deepseek-superagent",
        "watchFor": "Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory"
      },
      {
        "aheadOn": [
          "Reliability, 55 against 15",
          "Schema \u0026 documentation, 90 against 61",
          "Agent ergonomics, 80 against 67",
          "Security \u0026 auth, 82 against 33",
          "Payments \u0026 pricing, 60 against 40",
          "Maintenance \u0026 community, 87 against 34",
          "Transparency \u0026 trust, 85 against 52"
        ],
        "also": [
          "Agent-ready, a grade of BB or better"
        ],
        "goodFor": "Teams that want an open-source harness with safe defaults for unattended runs and an optional hosted agent.",
        "slug": "openai-codex",
        "watchFor": "Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes"
      }
    ],
    "history": {
      "deepseek-superagent": null,
      "openai-codex": [
        {
          "causes": [
            "method"
          ],
          "date": "2026-10-27",
          "delta": 0.1,
          "from": 73.4,
          "fromGrade": "BB",
          "to": 73.5,
          "toGrade": "BB"
        },
        {
          "causes": [
            "evidence"
          ],
          "date": "2026-10-17",
          "delta": 0.4,
          "from": 73,
          "fromGrade": "BB",
          "to": 73.4,
          "toGrade": "BB"
        },
        {
          "causes": [
            "method"
          ],
          "date": "2026-10-08",
          "delta": -0.4,
          "from": 73.4,
          "fromGrade": "BB",
          "to": 73,
          "toGrade": "BB"
        }
      ]
    },
    "job": {
      "capability": "agent.harness",
      "name": "Agent harnesses"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.json",
        "title": "Agent Zero vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.json",
        "title": "Agent Zero vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent.json",
        "title": "Aider vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-openai-codex.json",
        "title": "Aider vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/aider-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent.json",
        "title": "Amp vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-openai-codex.json",
        "title": "Amp vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/amp-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent.json",
        "title": "Antigravity CLI vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-openai-codex.json",
        "title": "Antigravity CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent.json",
        "title": "Auggie CLI vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-openai-codex.json",
        "title": "Auggie CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.json",
        "title": "Claude Code vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.json",
        "title": "Claude Code vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent.json",
        "title": "Cline vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-openai-codex.json",
        "title": "Cline vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/cline-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.json",
        "title": "Crush vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-openai-codex.json",
        "title": "Crush vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/crush-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent.json",
        "title": "Cursor CLI vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.json",
        "title": "Cursor CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent.json",
        "title": "DeepSeek Harness (dsh) vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-openai-codex.json",
        "title": "DeepSeek Harness (dsh) vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin.json",
        "title": "dsh-superagent (DeepSeek) vs Devin",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Droid CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi.json",
        "title": "dsh-superagent (DeepSeek) vs Pi",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Gemini CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli.json",
        "title": "dsh-superagent (DeepSeek) vs GitHub Copilot CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose.json",
        "title": "dsh-superagent (DeepSeek) vs goose",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2.json",
        "title": "dsh-superagent (DeepSeek) vs Harness²",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.json",
        "title": "dsh-superagent (DeepSeek) vs HarnessRouter",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules.json",
        "title": "dsh-superagent (DeepSeek) vs Jules",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie.json",
        "title": "dsh-superagent (DeepSeek) vs Junie CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kimi Code CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kiro CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent.json",
        "title": "dsh-superagent (DeepSeek) vs mini-swe-agent",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.json",
        "title": "dsh-superagent (DeepSeek) vs MiniMax Code",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Mistral Vibe CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code.json",
        "title": "dsh-superagent (DeepSeek) vs Muse Code",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode.json",
        "title": "dsh-superagent (DeepSeek) vs OpenCode",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.json",
        "title": "dsh-superagent (DeepSeek) vs OpenHands",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot.json",
        "title": "dsh-superagent (DeepSeek) vs OpenMausBot",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent.json",
        "title": "dsh-superagent (DeepSeek) vs Prime Agent",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Qoder CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code.json",
        "title": "dsh-superagent (DeepSeek) vs Qwen Code",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror.json",
        "title": "dsh-superagent (DeepSeek) vs Mirror CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Rovo Dev CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable.json",
        "title": "dsh-superagent (DeepSeek) vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.json",
        "title": "dsh-superagent (DeepSeek) vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp.json",
        "title": "dsh-superagent (DeepSeek) vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/devin-vs-openai-codex.json",
        "title": "Devin vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/devin-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/droid-cli-vs-openai-codex.json",
        "title": "Droid CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/droid-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-openai-codex.json",
        "title": "Pi vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex.json",
        "title": "Gemini CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-codex.json",
        "title": "GitHub Copilot CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/goose-vs-openai-codex.json",
        "title": "goose vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/goose-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness2-vs-openai-codex.json",
        "title": "Harness² vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/harness2-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-openai-codex.json",
        "title": "HarnessRouter vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/jules-vs-openai-codex.json",
        "title": "Jules vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/jules-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/junie-vs-openai-codex.json",
        "title": "Junie CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/junie-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.json",
        "title": "Kilo Code CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-openai-codex.json",
        "title": "Kimi Code CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-openai-codex.json",
        "title": "Kiro CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-openai-codex.json",
        "title": "mini-swe-agent vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/minimax-code-vs-openai-codex.json",
        "title": "MiniMax Code vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/minimax-code-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-codex.json",
        "title": "Mistral Vibe CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/muse-code-vs-openai-codex.json",
        "title": "Muse Code vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/muse-code-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.json",
        "title": "OpenAI Codex vs OpenCode",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-openhands.json",
        "title": "OpenAI Codex vs OpenHands",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-openhands"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-openmausbot.json",
        "title": "OpenAI Codex vs OpenMausBot",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-openmausbot"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-prime-agent.json",
        "title": "OpenAI Codex vs Prime Agent",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-prime-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-qoder-cli.json",
        "title": "OpenAI Codex vs Qoder CLI",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-qoder-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.json",
        "title": "OpenAI Codex vs Qwen Code",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.json",
        "title": "OpenAI Codex vs Mirror CLI",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-rovo-dev-cli.json",
        "title": "OpenAI Codex vs Rovo Dev CLI",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-rovo-dev-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-unstoppable.json",
        "title": "OpenAI Codex vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.json",
        "title": "OpenAI Codex vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-warp.json",
        "title": "OpenAI Codex vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.json",
        "title": "Clawboo vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent.json",
        "title": "CLI Manager vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous.json",
        "title": "dsh-superagent (DeepSeek) vs Harness",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.json",
        "title": "dsh-superagent (DeepSeek) vs Paperclip",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents.json",
        "title": "dsh-superagent (DeepSeek) vs Parallax",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents"
      }
    ],
    "panel": null,
    "scores": [
      {
        "by": 40,
        "deepseek-superagent": 15,
        "edge": "openai-codex",
        "key": "reliability",
        "name": "Reliability",
        "openai-codex": 55,
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "by": 29,
        "deepseek-superagent": 61,
        "edge": "openai-codex",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "openai-codex": 90,
        "weight": 13
      },
      {
        "by": 13,
        "deepseek-superagent": 67,
        "edge": "openai-codex",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "openai-codex": 80,
        "weight": 13
      },
      {
        "by": 49,
        "deepseek-superagent": 33,
        "edge": "openai-codex",
        "key": "security",
        "name": "Security \u0026 auth",
        "openai-codex": 82,
        "weight": 14
      },
      {
        "by": 20,
        "deepseek-superagent": 40,
        "edge": "openai-codex",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "openai-codex": 60,
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "by": 53,
        "deepseek-superagent": 34,
        "edge": "openai-codex",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "openai-codex": 87,
        "weight": 7
      },
      {
        "by": 33,
        "deepseek-superagent": 52,
        "edge": "openai-codex",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "openai-codex": 85,
        "weight": 7
      }
    ],
    "summary": "OpenAI Codex scores 73.5 (BB) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category. Both do agent harnesses.",
    "tasks": null,
    "tutorials": [],
    "verdicts": {
      "deepseek-superagent": "The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.",
      "openai-codex": "Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only. Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex",
    "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.min.md"
  },
  "markdown": "OpenAI Codex scores 73.5 (BB) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category. Both do agent harnesses.\n\n- dsh-superagent (DeepSeek): grade E, 42.1/100, rank #1108 of 1251. Markdown https://www.anchorterminal.com/tools/deepseek-superagent.md · JSON https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json\n- OpenAI Codex: grade BB, 73.5/100, rank #95 of 1251. Markdown https://www.anchorterminal.com/tools/openai-codex.md · JSON https://www.anchorterminal.com/api/v1/tools/openai-codex.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 955 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### dsh-superagent (DeepSeek) (E)\n\nGood for: Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.\n\nWatch for: Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory\n\n### OpenAI Codex (BB)\n\nGood for: Teams that want an open-source harness with safe defaults for unattended runs and an optional hosted agent.\n\nAhead on:\n- Reliability, 55 against 15\n- Schema \u0026 documentation, 90 against 61\n- Agent ergonomics, 80 against 67\n- Security \u0026 auth, 82 against 33\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 87 against 34\n- Transparency \u0026 trust, 85 against 52\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes\n\n\n## Why the edge\n\n### Maintenance \u0026 community: OpenAI Codex +53\n\n- dsh-superagent (DeepSeek) (34): Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).\n- OpenAI Codex (87): 0.163.0 on 15 October 2026 (30). 35 stable release tags between 21 July and 15 October, from 0.145.0 to 0.163.0 (20). Issues are labelled by surface, platform and cause, but over 5,000 stay open and a workflow closes stale contributor pull requests, per the 1 October check, not re-read on 17 October (12). TypeScript and Python SDKs are in the same repository and built in CI (15). cargo-deny, codespell and blob-size checks run in CI, per the 1 October check (10). 30 + 20 + 12 + 15 + 10 = 87.\n\n### Security \u0026 auth: OpenAI Codex +49\n\n- dsh-superagent (DeepSeek) (33): Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).\n- OpenAI Codex (82): Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. Anonymous usage and health metrics on by default, described as free of personal data, with `[analytics] enabled = false`, and feedback collection on by default with its own switch, both confirmed on 17 October. Credentials are a ChatGPT login or an API key (20). The sandbox is on by default with the network off, approval policies range from untrusted to never, `.git`, `.agents` and `.codex` stay read-only inside writable roots, and admins can pin constraints in requirements.toml (19). Network off by default locally. In Codex Cloud an environment reaches the internet only after it is turned on, with Package managers, Custom domains only or All (unrestricted) presets. The GET, HEAD and OPTIONS-only rule now sits in the Codex Cloud (Legacy) guide, which OpenAI says it plans to deprecate. The docs keep a worked example of prompt-injection exfiltration (14). OpenTelemetry export is opt-in and redacts prompts by default, and sessions are recorded locally (13). Bugcrowd programme, SECURITY.md and a valid security.txt on openai.com, per the 1 October check. OSV lists the same two advisories for @openai/codex on 17 October (GHSA-w5fx-fh39-j5rw of September 2025 and GHSA-xrxf-jgv3-qmrm, CVE-2025-61260, of April 2026), and the critical CVE-2025-61260 came through Check Point and NVD rather than an OpenAI advisory (16). SOC 2 isn't scored on the framework reading. 20 + 19 + 14 + 13 + 16 = 82.\n\n### Reliability: OpenAI Codex +40\n\n- dsh-superagent (DeepSeek) (15): Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install \u0026\u0026 pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).\n- OpenAI Codex (55): Local-package reading. npm (node 16 or newer, 0.163.0 on 17 October) with per-platform binaries for macOS, Linux and Windows on x64 and arm64, Homebrew and standalone installers, and a signed PowerShell installer since 0.162.0 (20). Public CI, with rust-ci and a blocking-ci workflow that runs on every push to main, and the 10 rust-ci runs on main that our reader showed all passed, per the 1 October check, not re-read on 17 October as GitHub's pages weren't reachable (20). Over 5,000 open issues and 169 open pull requests, labelled by surface and platform, with crash and regression reports among recent ones, per the 1 October check, not re-read on 17 October (10). 0.x minors every few days, and release notes are still sorted under headings for additions, fixes, documentation and chores, with no breaking-change section (5). 0.163.0, pre-1.0 (0). 20 + 20 + 10 + 5 + 0 = 55. OpenAI's status feed lists Codex incidents since 1 October, among them elevated Codex Cloud errors posted on 6 October and degraded GPT-6.1 Sol in the CLI and other clients on 13 October. The local-package reading doesn't score them.\n\n### Transparency \u0026 trust: OpenAI Codex +33\n\n- dsh-superagent (DeepSeek) (52): MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).\n- OpenAI Codex (85): Apache-2.0 for the CLI and SDKs (30). The config docs say analytics are anonymous and exclude prompts, and the pricing page says cloud use needs a plan, but the retention terms for Codex Cloud tasks and the ChatGPT data controls weren't read on 1 or 17 October (12). The changelog at learn.chatgpt.com dates model retirements ahead of time with replacements (GPT-5.4 and GPT-5.4 mini announced on 31 July for 31 August, GPT-5.5 announced on 14 September for 14 October 2026), and the Feature Maturity page says stable removals typically go through a deprecation process. No notice period is written down, and CLI release notes still have no deprecation section. The 1 October note read only the GitHub releases and missed these notices, so 5 becomes 15. Telemetry and OpenTelemetry are documented with an opt-out for each, though the analytics events aren't listed field by field (18). 30 + 12 + 15 + 18 = 75.\n\n### Schema \u0026 documentation: OpenAI Codex +29\n\n- dsh-superagent (DeepSeek) (61): Framework reading, as for deepseek-harness. No OpenAPI or JSON Schema is published. docs/006 documents the Management API's routes, fields, block shapes and refusals in tables, and the code validates settings with zod (12). Markdown docs in the repository, readable raw, and a SETUP.md written for a coding agent. No llms.txt (5). Nine numbered documents read in order, each stating purpose, limits and what not to do, such as never rerunning the profile-creation command for an upgrade (17). Closed sets for accept mode (`off`, `observe`, `auto`), admission cells, Source states, health states and `listen` (12). A worked curl example, refusals as 400, 404, 409 and 500 with `issues`, `setup` or `code`, a troubleshooting table and status exit codes 0 to 3 (13). package.json says 0.1.0 and pins an `engines.dsh` range, but no changelog or tags were found (2).\n- OpenAI Codex (90): Framework reading. A JSON Schema for config.toml in the repository (codex-rs/core/config.schema.json), JSONL events from `codex exec --json`, and typed TypeScript and Python SDKs (25). llms.txt at learn.chatgpt.com with a Markdown twin for every page, re-read on 17 October (10). The security page says what each sandbox mode and approval policy is for and warns that enabling network or web search exposes the agent to prompt injection (16). Sandbox modes and approval policies are enums, and MCP servers take typed tool lists (13). Examples throughout, and `--output-schema` validates the final message. The non-interactive page names the event types, `turn.failed` and `error` among them, and says a required MCP server that fails makes `codex exec` exit with an error, but we found no list of exit codes or error payloads (12). Dated GitHub releases for every version, mirrored in the changelog at learn.chatgpt.com (14). 25 + 10 + 16 + 13 + 12 + 14 = 90.\n\n### Payments \u0026 pricing: OpenAI Codex +20\n\n- dsh-superagent (DeepSeek) (40): Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.\n- OpenAI Codex (60): Harness reading of the published rubric. No payment protocol (0). Plan prices and API token prices are public without a login, and the pricing page gives per-plan message ranges, confirmed on 17 October (20). ChatGPT Free and Go include Codex, and Free needs no card (20). `--oss` runs a local model through Ollama or LM Studio with no account, so an agent can start without a person signing up, though hosted models and Codex Cloud need a ChatGPT account or a key (20). 0 + 20 + 20 + 20 = 60.\n\n## Score by category\n\n| Category | Weight | dsh-superagent (DeepSeek) | OpenAI Codex | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 55 | OpenAI Codex +40 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 61 | 90 | OpenAI Codex +29 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 80 | OpenAI Codex +13 |\n| Security \u0026 auth | 14% (17.5 this run) | 33 | 82 | OpenAI Codex +49 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 60 | OpenAI Codex +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 34 | 87 | OpenAI Codex +53 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 85 | OpenAI Codex +33 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **42.1 · E** | **73.5 · BB** | |\n\n## Facts side by side\n\n| Fact | dsh-superagent (DeepSeek) | OpenAI Codex |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | DeepSeek | OpenAI |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports |  |  |\n| Auth | Token | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| Last release | 2026-10-31 | 2026-10-15 |\n| Terms last updated | no document linked | couldn't be read |\n| Privacy policy last updated | 2026-09-20 | couldn't be read |\n| Customer content may train models | not read yet | couldn't be read |\n| Terms restrict automated access | not read yet | couldn't be read |\n| Terms restrict benchmarking | not read yet | couldn't be read |\n| Terms or service can change without notice | not read yet | couldn't be read |\n| Arbitration or class-action waiver | not read yet | couldn't be read |\n| Popularity | none | 126k stars |\n| Agent reviews | none | 3/5 (2) |\n\n## How the scores have moved\n\n### dsh-superagent (DeepSeek)\n\nNo score change since it was listed.\n\n### OpenAI Codex\n\n- +0.1 on 27 October 2026: checklist\n- +0.4 on 17 October 2026: new evidence\n- -0.4 on 8 October 2026: checklist\n\n## Verdicts\n\n**dsh-superagent (DeepSeek).** The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.\n\n**OpenAI Codex.** Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only. Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes.\n\n## Before you call either\n\n### dsh-superagent (DeepSeek)\n\n1. Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory\n2. Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code\n3. Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right\n4. Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request\n5. Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409\n\n### OpenAI Codex\n\n1. Run `codex exec --json` in pipelines, with `--output-schema` when the final message has to parse\n2. Keep the default sandbox, which has the network off. `--yolo` removes both the sandbox and approvals\n3. Replace `gpt-5.5` with `gpt-6.1-sol` in saved configs, custom agents and scripts under ChatGPT sign-in. GPT-5.5 retired there on 14 October 2026\n4. Set `[analytics] enabled = false` and `[feedback] enabled = false` in config.toml to keep usage data local\n5. Pin the npm version. A 0.x minor lands every few days\n\n## Questions\n\n### Which is better for AI agents, dsh-superagent (DeepSeek) or OpenAI Codex?\n\nOpenAI Codex scores 73.5 (BB) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category.\n\n### Are dsh-superagent (DeepSeek) and OpenAI Codex open source?\n\nYes. dsh-superagent (DeepSeek) is open source (MIT). OpenAI Codex is open source (Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deepseek-superagent\", \"b\": \"openai-codex\"}`. From a terminal: `anchor compare deepseek-superagent openai-codex`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json and https://www.anchorterminal.com/api/v1/tools/openai-codex.json\n\n## Other comparisons with dsh-superagent (DeepSeek) or OpenAI Codex\n\n- [Agent Zero vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.md)\n- [Agent Zero vs OpenAI Codex](https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.md)\n- [Aider vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent.md)\n- [Aider vs OpenAI Codex](https://www.anchorterminal.com/compare/aider-vs-openai-codex.md)\n- [Amp vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent.md)\n- [Amp vs OpenAI Codex](https://www.anchorterminal.com/compare/amp-vs-openai-codex.md)\n- [Antigravity CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent.md)\n- [Antigravity CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/antigravity-cli-vs-openai-codex.md)\n- [Auggie CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent.md)\n- [Auggie CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/auggie-vs-openai-codex.md)\n- [Claude Code vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.md)\n- [Claude Code vs OpenAI Codex](https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.md)\n- [Cline vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent.md)\n- [Cline vs OpenAI Codex](https://www.anchorterminal.com/compare/cline-vs-openai-codex.md)\n- [Crush vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.md)\n- [Crush vs OpenAI Codex](https://www.anchorterminal.com/compare/crush-vs-openai-codex.md)\n- [Cursor CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent.md)\n- [Cursor CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.md)\n- [DeepSeek Harness (dsh) vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent.md)\n- [DeepSeek Harness (dsh) vs OpenAI Codex](https://www.anchorterminal.com/compare/deepseek-harness-vs-openai-codex.md)\n- [dsh-superagent (DeepSeek) vs Devin](https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin.md)\n- [dsh-superagent (DeepSeek) vs Droid CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli.md)\n- [dsh-superagent (DeepSeek) vs Pi](https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi.md)\n- [dsh-superagent (DeepSeek) vs Gemini CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli.md)\n- [dsh-superagent (DeepSeek) vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli.md)\n- [dsh-superagent (DeepSeek) vs goose](https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose.md)\n- [dsh-superagent (DeepSeek) vs Harness²](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2.md)\n- [dsh-superagent (DeepSeek) vs HarnessRouter](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.md)\n- [dsh-superagent (DeepSeek) vs Jules](https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules.md)\n- [dsh-superagent (DeepSeek) vs Junie CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie.md)\n- [dsh-superagent (DeepSeek) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Kimi Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Kiro CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli.md)\n- [dsh-superagent (DeepSeek) vs mini-swe-agent](https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent.md)\n- [dsh-superagent (DeepSeek) vs MiniMax Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.md)\n- [dsh-superagent (DeepSeek) vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli.md)\n- [dsh-superagent (DeepSeek) vs Muse Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code.md)\n- [dsh-superagent (DeepSeek) vs OpenCode](https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode.md)\n- [dsh-superagent (DeepSeek) vs OpenHands](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.md)\n- [dsh-superagent (DeepSeek) vs OpenMausBot](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot.md)\n- [dsh-superagent (DeepSeek) vs Prime Agent](https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent.md)\n- [dsh-superagent (DeepSeek) vs Qoder CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli.md)\n- [dsh-superagent (DeepSeek) vs Qwen Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code.md)\n- [dsh-superagent (DeepSeek) vs Mirror CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror.md)\n- [dsh-superagent (DeepSeek) vs Rovo Dev CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli.md)\n- [dsh-superagent (DeepSeek) vs Unstoppable](https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable.md)\n- [dsh-superagent (DeepSeek) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.md)\n- [dsh-superagent (DeepSeek) vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp.md)\n- [Devin vs OpenAI Codex](https://www.anchorterminal.com/compare/devin-vs-openai-codex.md)\n- [Droid CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/droid-cli-vs-openai-codex.md)\n- [Pi vs OpenAI Codex](https://www.anchorterminal.com/compare/earendil-pi-vs-openai-codex.md)\n- [Gemini CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex.md)\n- [GitHub Copilot CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-codex.md)\n- [goose vs OpenAI Codex](https://www.anchorterminal.com/compare/goose-vs-openai-codex.md)\n- [Harness² vs OpenAI Codex](https://www.anchorterminal.com/compare/harness2-vs-openai-codex.md)\n- [HarnessRouter vs OpenAI Codex](https://www.anchorterminal.com/compare/harnessrouter-vs-openai-codex.md)\n- [Jules vs OpenAI Codex](https://www.anchorterminal.com/compare/jules-vs-openai-codex.md)\n- [Junie CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/junie-vs-openai-codex.md)\n- [Kilo Code CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.md)\n- [Kimi Code CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kimi-code-cli-vs-openai-codex.md)\n- [Kiro CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kiro-cli-vs-openai-codex.md)\n- [mini-swe-agent vs OpenAI Codex](https://www.anchorterminal.com/compare/mini-swe-agent-vs-openai-codex.md)\n- [MiniMax Code vs OpenAI Codex](https://www.anchorterminal.com/compare/minimax-code-vs-openai-codex.md)\n- [Mistral Vibe CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-codex.md)\n- [Muse Code vs OpenAI Codex](https://www.anchorterminal.com/compare/muse-code-vs-openai-codex.md)\n- [OpenAI Codex vs OpenCode](https://www.anchorterminal.com/compare/openai-codex-vs-opencode.md)\n- [OpenAI Codex vs OpenHands](https://www.anchorterminal.com/compare/openai-codex-vs-openhands.md)\n- [OpenAI Codex vs OpenMausBot](https://www.anchorterminal.com/compare/openai-codex-vs-openmausbot.md)\n- [OpenAI Codex vs Prime Agent](https://www.anchorterminal.com/compare/openai-codex-vs-prime-agent.md)\n- [OpenAI Codex vs Qoder CLI](https://www.anchorterminal.com/compare/openai-codex-vs-qoder-cli.md)\n- [OpenAI Codex vs Qwen Code](https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.md)\n- [OpenAI Codex vs Mirror CLI](https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.md)\n- [OpenAI Codex vs Rovo Dev CLI](https://www.anchorterminal.com/compare/openai-codex-vs-rovo-dev-cli.md)\n- [OpenAI Codex vs Unstoppable](https://www.anchorterminal.com/compare/openai-codex-vs-unstoppable.md)\n- [OpenAI Codex vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.md)\n- [OpenAI Codex vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/openai-codex-vs-warp.md)\n- [Clawboo vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.md)\n- [CLI Manager vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent.md)\n- [dsh-superagent (DeepSeek) vs Harness](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous.md)\n- [dsh-superagent (DeepSeek) vs Paperclip](https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.md)\n- [dsh-superagent (DeepSeek) vs Parallax](https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-01",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "dsh-superagent (DeepSeek) vs OpenAI Codex",
        "url": ""
      }
    ],
    "description": "OpenAI Codex scores 73.5 (BB) to dsh-superagent's 42.1 (E) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "dsh-superagent (DeepSeek) E 42.1",
      "OpenAI Codex BB 73.5",
      "scores"
    ],
    "h1": "dsh-superagent (DeepSeek) vs OpenAI Codex",
    "image": "https://www.anchorterminal.com/assets/og/default.png",
    "path": "/compare/deepseek-superagent-vs-openai-codex",
    "published": "2026-10-01",
    "section": "tools",
    "title": "dsh-superagent vs OpenAI Codex for AI agents (2026) | Anchor Terminal",
    "toc": null,
    "updated": "2026-11-01",
    "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex"
  },
  "tokens": {
    "markdown": 7050,
    "slim": 3580
  },
  "version": 1
}
