Apache Magpie

Still manually
triaging security reports?Put your coding agent to work

Apache Magpie is an open-source library of dozens of reusable agent skills across the software lifecycle, already used to handle thousands of issues in software the world depends on.

Get started

  1. A security report arrives

    There goes the work I had planned!

  2. Magpie

    • Investigates the report
    • Writes and tests the fix
    • Coordinates release & CVE

    I’ve got a workflow for this.

  3. A released fix and a published CVE

    I can stop chasing this report.

Works in

Claude CodeCodexCursorGitHub CopilotGemini CLIOpenCode
and more

Who’s using Magpie

Apache Airflow

Airflow maintainers use Magpie to investigate security reports and prepare fixes.

Good old days
The AI boom
Magpie introduced
Security reports and maintainer time, October 2025 to August 2026Illustrative trends over time, not monthly measurements. Security reports and manual effort rise rapidly during the AI boom. After Magpie adoption in April 2026, security reports continue rising while maintainer time falls. The amber branch shows a hypothetical scenario without Magpie. The shaded gap represents time back for maintainers.Incoming external security reportsMaintainer timeWithout MagpieWith MagpieTime backfor maintainers
  • Incoming external security reports
  • Maintainer time without Magpie
  • Maintainer time with Magpie

Shaded area: time back for maintainers

Illustrative trends Read the story and data
“Using Magpie helped us to do things that matter”
Jarek PotiukApache Airflow® PMC member

What does Magpie do here?

Magpie’s skills cover the whole process, from checking a security report to fixing the problem, releasing the fix, and closing the report.

A security report arrives in your project

Good old days
  • You find the report in your emails
  • You copy logs and screenshots
  • You piece together the discussion

Where was that detail again?

Magpie
  • You open one organized report
  • You review the collected evidence
  • You read the discussion in one place

Finally, it’s all in one place!

ReportA security report arrives in your project
Magpie
  • You open one organized report
  • You review the collected evidence
  • You read the discussion in one place
Compare with doing it manually
  • You find the report in your emails
  • You copy logs and screenshots
  • You piece together the discussion
TriageYou need to know whether the report is valid
Magpie
  • You review checks against the security rules
  • You review matching past reports
  • You review the suggested next step
Compare with doing it manually
  • You read the project’s security rules
  • You search for similar past reports
  • You work out whether a fix is needed
Fix & testThe vulnerability is confirmed, so it’s time to fix it
Magpie
  • You review how to reproduce the bug
  • You review the patch and test
  • You review the check results
Compare with doing it manually
  • You reproduce the bug
  • You write the patch and test
  • You run the checks
ReleaseThe patch is merged, but users still need a release
Magpie
  • You review the release checks
  • You review the recorded version
  • You review the collected release links
Compare with doing it manually
  • You find the fix in the release
  • You look up the published version
  • You copy release links into the report
DiscloseNow users need to know how to protect themselves
Magpie
  • You review the drafted advisory and CVE
  • You review the versions and update steps
  • You review the reporter’s credit
Compare with doing it manually
  • You write the advisory and CVE
  • You list affected versions and fixes
  • You add the reporter’s credit
CloseThe fix is public, and the report can be closed
Magpie
  • You review the advisory check
  • You review the report prepared for closure
  • You review the saved lessons
Compare with doing it manually
  • You check the public advisory
  • You gather the links to close the report
  • You write down what you learned

Skills for the work you do every day

Magpie has dozens of skills for fixing bugs, reviewing code, preparing releases, and more. Pick the ones your project needs.

New reports keep arriving

A user reports a failure. Another report looks familiar. Some details are missing.

I can’t get ahead of this queue!

Magpie

  • Checks for duplicates
  • Reproduces and classifies reports
  • Drafts the next response

I’ve got a workflow for this.

You know what to investigate

  • The issue has steps to reproduce it.
  • Missing information is requested in a draft.
  • Related reports are linked.

I know where to start!

Explore triage workflows
TriageNew reports keep arriving

A user reports a failure. Another report looks familiar. Some details are missing.

Magpie
  • Checks for duplicates
  • Reproduces and classifies reports
  • Drafts the next response

You know what to investigate

  • The issue has steps to reproduce it.
  • Missing information is requested in a draft.
  • Related reports are linked.
Explore triage workflows
DevelopA bug needs a fix

A user found a failing case. You need to prevent it happening again.

Magpie
  • Reproduces the failure
  • Writes a patch and regression test
  • Runs checks and reviews the diff

You can review the proposed fix

  • The patch addresses the failure.
  • A test covers the regression.
  • Check results accompany the change.
Explore develop workflows
ReviewContributors keep sending changes

Someone fixes a bug. Another contributor adds a feature. More pull requests need a review.

Magpie
  • Triages the review queue
  • Checks CI and reviews the code
  • Drafts feedback for each PR

You know where you’re needed

  • Review findings are ready to approve.
  • Requested changes are explained.
  • Failing checks are flagged.
Explore review workflows
ReleaseA release is coming

A candidate needs verification. The vote and announcement need preparing.

Magpie
  • Verifies the release candidate
  • Prepares the vote and tally
  • Drafts the announcement

You can make the release decision

  • Verification results are collected.
  • The vote is prepared for review.
  • The announcement is ready to approve.
Explore release workflows
MaintainThe repository keeps changing

Dependencies need updating. A workflow starts failing. Tests become unreliable.

Magpie
  • Audits dependencies and licences
  • Investigates failing workflows
  • Recommends maintenance work

You can prioritise the next fix

  • Dependency risks are explained.
  • Workflow problems have findings.
  • Suggested fixes are ready to assess.
Explore maintain workflows
GrowSomeone wants to contribute

They need a suitable first issue. They want to understand the code.

Magpie
  • Finds a suitable first issue
  • Explains the relevant code
  • Shows how to test the change

They know how to get started

  • The first task matches their experience.
  • The relevant code is explained.
  • Test instructions accompany the task.
Explore grow workflows

Give your agent a workspace, not your whole machine

Magpie installs and verifies layered protection so you can work on untrusted software locally, without a separate VM on macOS or Linux.

In YOLO mode

Your agent
  • Personal filesCan be changed or deleted
  • CredentialsCan be read or exposed
  • NetworkData can leave your machine
A loan for Hawaii next?

What if my agent deletes all my files?

Magpie

Your agent
Environment credentials removed
File and network access sandboxed
Agent tools restricted
Approval required for external writes
Your allowed workspaceProject files

I decide what my agent can access.

Set up agent isolation

Make Magpie work your way

Magpie

  • Checks the changes and CI results
  • Reviews the code for problems
  • Drafts actionable feedback

I don’t have to start from scratch!

Your team’s rules

Use our review checklist. Ask the owning team for a review. Include a changelog entry.

I don’t have to repeat myself.

See how project rules work

Get more out of your agent

Magpie is a place to start learning, too. Explore practical guides for using agents in everyday work, one new skill at a time.

Start with the basics

Where do I even start? Start with how agents use models, tools and context to work through a task.

Meet your agent

Work better together

I’m getting the hang of this! Give clearer instructions, steer the work and know when to step in.

Build good habits

Make a skill of your own

I could turn this into a skill! Turn a familiar task into a skill your agent can use again.

Try your first skill
Explore the learning guides

Try Magpie on your project

Get started
Suggest a change