
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Scientific research agent extension for OpenCode - turns research goals into reproducible Jupyter notebooks
"Every great professor needs a great teaching assistant."
Gyoshu (교수, Professor) orchestrates. Jogyo (조교, Teaching Assistant) executes.
Together, they form an end-to-end research automation system for OpenCode that turns your research goals into reproducible Jupyter notebooks—complete with hypotheses, experiments, findings, and publication-ready reports.
| Agent | Role | Korean | What They Do |
|---|---|---|---|
| Gyoshu | 🎩 Professor | 교수 | Plans research, orchestrates workflow, manages sessions |
| Jogyo | 📚 Teaching Assistant | 조교 | Executes Python code, runs experiments, generates outputs |
| Baksa | 🔍 PhD Reviewer | 박사 | Adversarial verifier — challenges claims, calculates trust scores |
| Jogyo Paper Writer | ✍️ Grad Student | 조교 | Transforms raw findings into narrative research reports |
Think of it like a research lab:
🎬 Demo coming soon! Try the Quick Tutorial to see Gyoshu in action.
[OBJECTIVE], [HYPOTHESIS], [FINDING] markers.ipynbAdd Gyoshu to your opencode.json:
{
"plugin": ["gyoshu"]
}
That's it! OpenCode will auto-install Gyoshu from npm on next startup.
# Using bunx (no global install needed)
bunx gyoshu install
# Or install globally first
npm install -g gyoshu
gyoshu install
The CLI automatically adds Gyoshu to your opencode.json.
Clone & link locally:
git clone https://github.com/Yeachan-Heo/My-Jogyo.git
cd My-Jogyo && bun install
Then in your opencode.json:
{
"plugin": ["file:///path/to/My-Jogyo"]
}
Verify installation:
# Check status via CLI
bunx gyoshu check
# Or in OpenCode
opencode
/gyoshu doctor
Using Claude, GPT, Gemini, or another AI assistant with OpenCode? This section is for you.
Setup is the same — run bunx gyoshu install or add "gyoshu" to your plugin array. Then give your LLM the context it needs:
Point your LLM to the guide:
"Read
AGENTS.mdin the Gyoshu directory for full context on how to use the research tools."
Or paste this quick start prompt:
I've installed Gyoshu. Read AGENTS.md and help me run /gyoshu to analyze my data.
Key commands your LLM should know:
| Command | What It Does |
|---|---|
/gyoshu | Start interactive research |
/gyoshu-auto <goal> | Autonomous research (hands-off) |
/gyoshu doctor | Check system health and diagnose issues |
Tip: AGENTS.md contains everything an LLM needs — agents, commands, markers, troubleshooting, and more.
# Start OpenCode
opencode
# 👋 Say hi to the Professor
/gyoshu
# 🎯 Start a new research project
/gyoshu analyze customer churn patterns in the telecom dataset
# 🤖 Or let it run autonomously (hands-off!)
/gyoshu-auto classify iris species using random forest
# 📊 Generate a report
/gyoshu report
# 🔄 Continue where you left off
/gyoshu continue
Real-world example: Comprehensive exploratory data analysis of Binance USD-M futures data with multi-dimensional visualizations.
What it shows:
# Binance futures analysis (API or local data)
/gyoshu-auto perform comprehensive EDA on binance futures data
# Titanic classification (classic ML workflow)
/gyoshu-auto analyze Titanic survival data and build classification model
# Iris clustering (no download needed - sklearn built-in)
/gyoshu-auto cluster iris dataset and visualize results
/gyoshu)| Command | What It Does |
|---|---|
/gyoshu | Show status and what to do next |
/gyoshu <goal> | Start interactive research |
/gyoshu-auto <goal> | Autonomous mode (set it and forget it!) |
/gyoshu plan <goal> | Just create a plan, don't execute |
/gyoshu continue | Pick up where you left off |
/gyoshu report | Generate research report |
/gyoshu list | See all your research projects |
/gyoshu search <query> | Find stuff across all notebooks |
/gyoshu doctor | Check system health and diagnose issues |
| Mode | Best For | Command |
|---|---|---|
| 🎓 Interactive | Learning, exploring, iterating | /gyoshu <goal> |
| 🤖 Autonomous | Clear goals, hands-off execution | /gyoshu-auto <goal> |
| 🔧 REPL | Quick exploration, debugging | /gyoshu repl <query> |
/gyoshu analyze wine quality factors and build a predictive model
Gyoshu creates a structured research plan with clear objectives and hypotheses.
Jogyo runs Python code, using structured markers to organize output:
print("[OBJECTIVE] Predict wine quality from physicochemical properties")
print("[HYPOTHESIS] Alcohol content is the strongest predictor")
# ... analysis code ...
print(f"[METRIC:accuracy] {accuracy:.3f}")
print("[FINDING] Alcohol shows r=0.47 correlation with quality")
print("[CONCLUSION] Hypothesis supported - alcohol is key predictor")
Everything is captured in notebooks/wine-quality.ipynb with full reproducibility.
The Paper Writer agent transforms markers into a narrative report:
"Our analysis of 1,599 wine samples revealed that alcohol content emerges as the dominant predictor of quality ratings (r = 0.47). The final Random Forest model achieved 87% accuracy..."
your-project/
├── notebooks/ # 📓 Research notebooks
│ ├── wine-quality.ipynb
│ └── customer-churn.ipynb
├── reports/ # 📝 Generated reports
│ └── wine-quality/
│ ├── report.md # AI-written narrative report
│ ├── figures/ # Saved plots
│ └── models/ # Saved models
├── data/ # 📊 Your datasets
└── .venv/ # 🐍 Python environment
Runtime files (sockets, locks) go to OS temp directories—not your project! 🧹
When you run research, Gyoshu creates these artifacts in your project:
your-project/
├── notebooks/
│ └── your-research.ipynb ← Research notebook (source of truth)
├── reports/
│ └── your-research/
│ ├── figures/ ← Saved plots (.png, .svg)
│ ├── models/ ← Trained models (.pkl, .joblib)
│ └── report.md ← Generated research report
└── (your existing files untouched!)
Note: Gyoshu never modifies your
.venv/,data/, or other existing project files.
The TA uses structured markers to organize research output:
| Marker | Purpose | Example |
|---|---|---|
[OBJECTIVE] | Research goal | [OBJECTIVE] Classify iris species |
[HYPOTHESIS] | What you're testing | [HYPOTHESIS] H0: no difference; H1: petal length predicts species |
[DATA] | Dataset info | [DATA] Loaded 150 samples |
[FINDING] | Key discovery | [FINDING] Setosa is linearly separable (d=2.1, p<0.001) |
[CONCLUSION] | Final verdict | [CONCLUSION] Hypothesis confirmed with large effect |
| Marker | Purpose | Example |
|---|---|---|
[STAT:ci] | Confidence interval | [STAT:ci] 95% CI [0.82, 0.94] |
[STAT:effect_size] | Effect magnitude | [STAT:effect_size] Cohen's d = 0.75 (medium) |
[STAT:p_value] | Statistical significance | [STAT:p_value] p = 0.003 |
[SO_WHAT] | Practical significance | [SO_WHAT] This means 15% cost reduction |
[LIMITATION] | Threats to validity | [LIMITATION] Small sample size (n=50) |
| Marker | Purpose | Example |
|---|---|---|
[METRIC:baseline_*] | Dummy model benchmark | [METRIC:baseline_accuracy] 0.33 |
[METRIC:cv_*] | Cross-validation scores | [METRIC:cv_accuracy_mean] 0.95 |
Quality Gate: Findings without
[STAT:ci]and[STAT:effect_size]are marked as "Exploratory" in reports.
Gyoshu enforces senior data scientist level quality through automated quality gates. Every claim requires statistical evidence.
⚠️ No
[FINDING]is accepted without:
[STAT:ci]— Confidence interval (within 10 lines before)[STAT:effect_size]— Effect magnitude (within 10 lines before)
Findings that fail these checks are downgraded to "Exploratory Observations" in reports.
| Requirement | Penalty if Missing | Why It Matters |
|---|---|---|
| CI for findings | -30 trust | Point estimates without uncertainty are misleading |
| Effect size for findings | -30 trust | Statistical significance ≠ practical significance |
| Baseline for ML | -20 trust | Can't claim improvement without a reference point |
| Cross-validation for ML | -25 trust | Single train/test split can be lucky |
| Score | Status | What Happens |
|---|---|---|
| ≥ 80 | ✅ Verified | Finding accepted as key result |
| 60-79 | ⚠️ Partial | Accepted with caveats |
| < 60 | ❌ Rejected | Marked as exploratory, requires rework |
Learn more: See AGENTS.md for complete marker reference and statistical requirements.
Gyoshu uses your project's .venv/ virtual environment:
| Priority | Type | How It's Detected |
|---|---|---|
| 1️⃣ | venv | .venv/bin/python exists |
Quick setup:
python3 -m venv .venv
.venv/bin/pip install pandas numpy scikit-learn matplotlib seaborn
Note: Gyoshu uses your project's virtual environment. It never modifies system Python.
psutil (for memory tracking)| Platform | Status | Notes |
|---|---|---|
| Linux | ✅ Primary | Tested on Ubuntu 22.04+ |
| macOS | ✅ Supported | Intel & Apple Silicon |
| Windows | ⚠️ WSL2 Only | Native Windows not supported |
Gyoshu is distributed via npm. OpenCode automatically handles plugin updates.
Force update:
# Clear OpenCode's cache
rm -rf ~/.cache/opencode/node_modules/gyoshu
# Or reinstall with latest version
bunx gyoshu@latest install
Then restart OpenCode.
Verify: opencode then /gyoshu doctor
Uninstall:
bunx gyoshu uninstall
See CHANGELOG.md for what's new.
In Korean academia:
This reflects the architecture: Gyoshu is the orchestrator agent that plans and manages research flow, while Jogyo is the executor agent that actually runs Python code and produces results.
It's a partnership. The Professor has the vision. The TA makes it happen. Together, they publish papers. 📚
Gyoshu works completely standalone. It has its own agent stack and requires no other OpenCode extensions (like oh-my-opencode).
For data-driven product development workflows, you can optionally combine Gyoshu with Oh-My-OpenCode:
| Tool | Focus | Independent? |
|---|---|---|
| Gyoshu (this project) | 📊 Research & Analysis | ✅ Fully standalone |
| Oh-My-OpenCode | 🏗️ Product Development | ✅ Fully standalone |
Gyoshu includes everything it needs for research:
| Agent | Role | What They Do |
|---|---|---|
@gyoshu | Professor | Plans research, orchestrates workflow |
@jogyo | TA | Executes Python code, runs experiments |
@baksa | PhD Reviewer | Challenges claims, verifies evidence |
@jogyo-insight | Evidence Gatherer | Searches docs, finds examples |
@jogyo-feedback | Learning Explorer | Reviews past sessions for patterns |
@jogyo-paper-writer | Report Writer | Transforms findings into narrative reports |
If you choose to use both tools together:
Research with Gyoshu:
/gyoshu-auto analyze user behavior and identify churn predictors
→ Produces insights: "Users who don't use feature X within 7 days have 3x churn rate"
Build with Oh-My-OpenCode:
/planner implement onboarding flow that guides users to feature X
→ Ships the feature that addresses the insight
Data informs decisions. Code ships solutions. 🚀
Note: You do NOT need Oh-My-OpenCode to use Gyoshu. Each tool works independently.
| Issue | Solution |
|---|---|
| "No .venv found" | Create a virtual environment: python3 -m venv .venv && .venv/bin/pip install pandas numpy |
| "Bridge failed to start" | Check Python version (need 3.10+): python3 --version. Check socket path permissions. |
| "Session locked" | Use /gyoshu unlock <sessionId> after verifying no process is running |
| OpenCode not in PATH | Install from opencode-ai/opencode |
Still stuck? Run /gyoshu doctor to diagnose issues.
MIT — Use it, fork it, teach with it!
Made with 🎓 for researchers who'd rather think than type
FAQs
Scientific research agent extension for OpenCode - turns research goals into reproducible Jupyter notebooks
We found that gyoshu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.