{"uid":"cap_Ml7lHUztz4TLguvB3GPVq","slug":"code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-6cef3796","name":"Code Security Audit (SQLi, XSS, Auth Bypass, Secret Leaks, Unsafe Deserialization)","description":"Security audit of code snippet (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization).","url":"https://linked-aimed-reproduced-changing.trycloudflare.com/v1/coder/security-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"usage":{"type":"object"},"choices":{"type":"array"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SzwPI_COi0yrqLvjfBbU3","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a code snippet for common security vulnerabilities including SQL injection, XSS, authentication bypass, secret leaks, and unsafe deserialization.","exampleAgentPrompt":"Can you run a security audit on this code snippet and flag any SQL injection, XSS, auth bypass, secret leaks, or unsafe deserialization issues I should worry about?","exampleUseCases":[{"title":"Pre-commit SQL injection check","prompt":"I just wrote this database query handler — can you audit it for SQL injection vulnerabilities before I push it to production?"},{"title":"Detecting hardcoded secrets in codebase","prompt":"Check this config loader code for any hardcoded API keys, passwords, or other secret leaks I might have accidentally left in."},{"title":"Auth bypass audit for login handler","prompt":"Here's my authentication middleware — can you look for any auth bypass or broken access control issues that could let someone skip login?"}],"resultDescription":"A structured list of security findings for the submitted code snippet, each identifying the vulnerability type (e.g. SQLi, XSS, auth bypass, secret leak, unsafe deserialization), its location or context within the code, severity, and recommended remediation steps.","failureModes":["Empty or missing code snippet in the request body yields no findings or an error","Unsupported or obfuscated code formats may reduce detection accuracy","Very long code snippets may exceed context limits and return partial results","Rate limiting or payment failure (x402) blocks the request entirely","Non-code text input may return irrelevant or empty findings"],"whenToPreferThis":"Choose this endpoint when you need a fast, targeted security scan focused specifically on the five most critical code-level vulnerability classes (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization) without a full code review. It is more focused than the structured code review sibling endpoint and faster than a full agentic task. Ideal for pre-commit hooks, CI pipelines, or quick spot-checks on individual functions or files.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:43:30.918Z","isFirstParty":false,"canonicalSlug":"code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-6cef3796"}