Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+22 more

    Codebase Security & Vulnerability Auditor

    1

    Autonomous AI code auditor. Scans codebases for leaked API keys, OWASP Top 10 vulnerabilities, and generates instant refactored security patches.

    $14

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Codebase Security & Vulnerability Auditor

    Codebase Security & Vulnerability Auditor

    Example session with this skill installed

    Scan my modified files in src/ for hardcoded API keys and injection flaws before I commit. Provide refactored code for any issues.

    • Read your context and instructions
    • Compiled the codebase security

    [CRITICAL] Hardcoded Stripe Live Secret Key (CWE-798)

    • File: src/billing.py:12
    • Fix: Use stripe.api_key = os.environ.get("STRIPE_SECRET_KEY") instead of the hardcoded string.

    [HIGH] SQL Injection (CWE-89)

    • File: src/db.py:42
    • Fix: Use cursor.execute("SELECT... = %s", (email,))

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Catch Vulnerabilities and Secret Leaks Before Code Reaches Production.

    AI coding assistants generate code at unprecedented speeds, but frequently introduce critical security vulnerabilities: hardcoded API keys, SQL injections, ReDoS regex patterns, and missing authentication middleware.

    Codebase Security & Vulnerability Auditor transforms your AI coding assistant (Claude Code, Cursor, Gemini CLI, Windsurf) into an autonomous AppSec engineer and pre-commit security copilot.

    🚀 Key Capabilities:

    • Pre-Commit Secret Scanning: Detects 40+ API token and private key formats (OpenAI, Stripe, AWS, GitHub) with instant environment-variable refactoring.
    • OWASP Top 10 & SAST Detection: Scans for SQL injections, Command Injections, SSRF, IDORs, and Insecure Direct Object References.
    • ReDoS Regex Vulnerability Audit: Identifies catastrophic polynomial regex backtracking patterns in validation strings.
    • Instant Drop-in Security Patches: Never just lists errors—generates clean, fully tested, refactored replacement code.
    • Zero-Friction CI/CD Integration: Runs locally in pre-commit hooks or directly inside terminal AI agent sessions.

    💻 Universal Compatibility:

    Works out of the box with Claude Code, Cursor, Gemini CLI, Antigravity, OpenHands, and all SKILL.md-compatible agents.

    How to use

    Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scanned

    Verified clean 1 month ago

    • Passed all security checks, Safe to install

    Listed1 month ago

    What's inside

    Frequently Asked Questions