{"uid":"cap_FNq1erNt94Mzoy8r20se-","slug":"dev-5090-code-security-audit-1affccc8","name":"dev-5090 Code Security Audit","description":"Security audit of code snippet (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization).","url":"https://dev-5090-box.tailfb4c1f.ts.net/v1/coder/security-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"usage":{"type":"object"},"choices":{"type":"array"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7eZaaP5qqYoMEFFo-yB6_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a code snippet for common security vulnerabilities including SQL injection, XSS, authentication bypass, secret leaks, and unsafe deserialization.","exampleAgentPrompt":"Can you run a security audit on this code and flag any SQL injection, XSS, authentication bypass, secret leaks, or unsafe deserialization issues? Here's the snippet: `SELECT * FROM users WHERE id = '\" + userId + \"'`","exampleUseCases":[{"title":"Pre-commit SQL injection check","prompt":"Before I merge this pull request, scan this database query function for SQL injection vulnerabilities: `def get_user(db, user_id): return db.execute('SELECT * FROM users WHERE id=' + user_id)`"},{"title":"Frontend XSS vulnerability review","prompt":"I just wrote this JavaScript that renders user input into the DOM — can you check it for XSS vulnerabilities and any other security issues? Here's the code: `document.getElementById('output').innerHTML = req.query.name;`"},{"title":"Secrets leak detection in config loader","prompt":"Audit this config loader class for hardcoded secrets, exposed API keys, or credential leaks before I push it to GitHub."}],"resultDescription":"A structured security audit report identifying specific vulnerability categories found in the code (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization), with per-finding details such as location, severity, and description of the risk.","failureModes":["Empty or missing code snippet results in an error or generic response","Very large code snippets may be truncated or exceed context limits","Minified or obfuscated code may reduce detection accuracy","Non-standard or uncommon languages may yield fewer findings","Service unavailable if the RTX 5090 host is offline or unreachable","False negatives possible for complex or multi-file vulnerabilities that require broader context"],"whenToPreferThis":"Choose this endpoint when you need fast, uncensored LLM-powered security analysis of a specific code snippet without restrictions. It is ideal for quick pre-commit checks, ad-hoc code reviews, or situations where standard security tools are unavailable. Unlike static analysis tools, it can reason about logic-level auth bypass and contextual secret leaks. Prefer this over general chat endpoints when you specifically need structured security findings across the five vulnerability categories it covers.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:44:15.088Z","isFirstParty":false,"canonicalSlug":"dev-5090-code-security-audit-1affccc8"}