Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIGitHub CopilotGitHub CopilotGemini CLIGemini CLI+20 more

    Codebase Security & Vulnerability Auditor

    1

    Autonomous AI code auditor. Scans codebases for leaked API keys, OWASP Top 10 vulnerabilities, and generates instant refactored security patches.

    $14

    Secure checkout via Stripe

    30-day refund guarantee

    Converts to your local currency at checkout

    0 installsSecurity scanned
    Codebase Security & Vulnerability Auditor

    Codebase Security & Vulnerability Auditor

    Example session with this skill installed

    Scan my modified files in src/ for hardcoded API keys and injection flaws before I commit. Provide refactored code for any issues.

    • Read your context and instructions
    • Compiled the codebase security

    [CRITICAL] Hardcoded Stripe Live Secret Key (CWE-798)

    • File: src/billing.py:12
    • Fix: Use stripe.api_key = os.environ.get("STRIPE_SECRET_KEY") instead of the hardcoded string.

    [HIGH] SQL Injection (CWE-89)

    • File: src/db.py:42
    • Fix: Use cursor.execute("SELECT... = %s", (email,))

    Connects securely to your tools. The creator never sees your data.

    What you get

    Scan staged files for high-entropy API keys and database credentials.Identify and patch SQL injection and XSS vulnerabilities in web routes.Detect ReDoS patterns in regular expressions matching user input.Generate an audit summary table for PR security verification.

    About this skill

    Catch Vulnerabilities and Secret Leaks Before Code Reaches Production.

    AI coding assistants generate code at unprecedented speeds, but frequently introduce critical security vulnerabilities: hardcoded API keys, SQL injections, ReDoS regex patterns, and missing authentication middleware.

    Codebase Security & Vulnerability Auditor transforms your AI coding assistant (Claude Code, Cursor, Gemini CLI, Windsurf) into an autonomous AppSec engineer and pre-commit security copilot.

    🚀 Key Capabilities:

    • Pre-Commit Secret Scanning: Detects 40+ API token and private key formats (OpenAI, Stripe, AWS, GitHub) with instant environment-variable refactoring.
    • OWASP Top 10 & SAST Detection: Scans for SQL injections, Command Injections, SSRF, IDORs, and Insecure Direct Object References.
    • ReDoS Regex Vulnerability Audit: Identifies catastrophic polynomial regex backtracking patterns in validation strings.
    • Instant Drop-in Security Patches: Never just lists errors—generates clean, fully tested, refactored replacement code.
    • Zero-Friction CI/CD Integration: Runs locally in pre-commit hooks or directly inside terminal AI agent sessions.

    💻 Universal Compatibility:

    Works out of the box with Claude Code, Cursor, Gemini CLI, Antigravity, OpenHands, and all SKILL.md-compatible agents.

    How to install

    Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.

    ~30 seconds
    1. 1

      Download the ZIP

      Free skills download straight away. Paid skills unlock right after purchase.

    2. 2

      Unzip into your skills folder

      Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.

    3. 3

      Ask your agent to use it

      Restart the agent if it was already running. It picks the skill up automatically - no config needed.

    Skills folder by agent

    Click the path to copy it. Create the folder if it does not exist yet.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 1 month ago

    • Passed all security checks, Safe to install

    Listed1 month ago

    What's inside

    Frequently Asked Questions