Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIGitHub CopilotGitHub CopilotGemini CLIGemini CLI+17 more

    Codebase Security & Vulnerability Auditor

    1

    Autonomous AI code auditor. Scans codebases for leaked API keys, OWASP Top 10 vulnerabilities, and generates instant refactored security patches.

    $14

    30-day refund guarantee

    Secure checkout via Stripe

    0 installsSecurity scanned

    See it in action

    You say

    Scan my modified files in src/ for hardcoded API keys and injection flaws before I commit. Provide refactored code for any issues.

    Your agent does

    [CRITICAL] Hardcoded Stripe Live Secret Key (CWE-798)

    • File: src/billing.py:12
    • Fix: Use stripe.api_key = os.environ.get("STRIPE_SECRET_KEY") instead of the hardcoded string.

    [HIGH] SQL Injection (CWE-89)

    • File: src/db.py:42
    • Fix: Use cursor.execute("SELECT... = %s", (email,))

    What you get

    Scan staged files for high-entropy API keys and database credentials.Identify and patch SQL injection and XSS vulnerabilities in web routes.Detect ReDoS patterns in regular expressions matching user input.Generate an audit summary table for PR security verification.

    About this skill

    Catch Vulnerabilities and Secret Leaks Before Code Reaches Production.

    AI coding assistants generate code at unprecedented speeds, but frequently introduce critical security vulnerabilities: hardcoded API keys, SQL injections, ReDoS regex patterns, and missing authentication middleware.

    Codebase Security & Vulnerability Auditor transforms your AI coding assistant (Claude Code, Cursor, Gemini CLI, Windsurf) into an autonomous AppSec engineer and pre-commit security copilot.

    🚀 Key Capabilities:

    • Pre-Commit Secret Scanning: Detects 40+ API token and private key formats (OpenAI, Stripe, AWS, GitHub) with instant environment-variable refactoring.
    • OWASP Top 10 & SAST Detection: Scans for SQL injections, Command Injections, SSRF, IDORs, and Insecure Direct Object References.
    • ReDoS Regex Vulnerability Audit: Identifies catastrophic polynomial regex backtracking patterns in validation strings.
    • Instant Drop-in Security Patches: Never just lists errors—generates clean, fully tested, refactored replacement code.
    • Zero-Friction CI/CD Integration: Runs locally in pre-commit hooks or directly inside terminal AI agent sessions.

    đź’» Universal Compatibility:

    Works out of the box with Claude Code, Cursor, Gemini CLI, Antigravity, OpenHands, and all SKILL.md-compatible agents.

    How to install

    Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean today

    • One-time purchase, yours forever

    Listedtoday

    Frequently Asked Questions