gpt-pilot

GPT Pilot is an open-source AI coding assistant designed to generate fully working, production-ready applications with developer oversight. Rather than producing an entire codebase at once, it works step by step—coding, debugging, and asking for review—so issues can be addressed incrementally. It supports LLM providers including OpenAI, Anthropic, and Groq (with Azure and OpenRouter via the OpenAI setting), uses SQLite by default with optional PostgreSQL support, and offers both a CLI tool and a VS Code extension. The system employs multiple specialized agents: a Specification Writer that clarifies requirements, an Architect that selects and verifies technologies, a Tech Lead that breaks down development tasks, a Developer that describes implementations, a Code Monkey that writes the actual code, a Reviewer that checks each step, a Debugger for troubleshooting, and a Technical Writer for documentation. It includes mechanisms to filter relevant code context for each LLM conversation, aiming to work at scale rather than only on simple apps. CLI options allow listing projects, continuing from specific steps, and deleting projects. IMPORTANT SECURITY NOTICE: The README states that malicious code (a credential-stealing supply-chain worm) was hidden in core/telemetry/ from August 2025 until 11 June 2026. The payload harvested credentials including cloud/AWS keys, GitHub/npm tokens, and SSH keys. Anyone who cloned and ran GPT Pilot from source during that window should rotate all credentials and check for indicators of compromise (files core/telemetry/_runtime.bin, core/telemetry/_hooks.py, or core/telemetry/.loader.lock; an unexpected bun binary; or temp folders named rt-*). The repository is no longer actively maintained, and the security cleanup does not represent a resumption of development. The project's successor is available at Pythagora.ai.