{"uid":"cap_iN5jCn5CKJ9dV_W-Npt5T","slug":"code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-d2674ed2","name":"Code Security Audit (SQLi, XSS, Auth Bypass, Secret Leaks, Unsafe Deserialization)","description":"Security audit of code snippet (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization).","url":"https://pearl-valium-stickers-upc.trycloudflare.com/v1/coder/security-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"usage":{"type":"object"},"choices":{"type":"array"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wl5IHvykUaOpIawHzp64f","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a code snippet for common security vulnerabilities including SQL injection, XSS, authentication bypass, secret leaks, and unsafe deserialization.","exampleAgentPrompt":"Can you run a security audit on this code snippet and flag any SQL injection, XSS, authentication bypass, secret leaks, or unsafe deserialization issues? Here's the code: `SELECT * FROM users WHERE id = ' + userId + '`","exampleUseCases":[{"title":"Pre-commit SQL injection check","prompt":"Before I merge this PR, scan this database query function for SQL injection vulnerabilities and tell me exactly where the risks are: [paste code here]"},{"title":"Hardcoded secret detection in config file","prompt":"Check this Python config loader for any hardcoded API keys, passwords, or other secrets that shouldn't be in source code."},{"title":"Auth bypass audit on login handler","prompt":"Audit my login handler code for authentication bypass flaws — I want to know if an attacker could skip password verification or escalate privileges."}],"resultDescription":"A structured list of security findings categorized by vulnerability type (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization), with descriptions of each issue, affected code locations, and severity indicators.","failureModes":["Empty or malformed code input returns no meaningful findings","Very large code snippets may be truncated or time out","Obfuscated or minified code may produce low-quality results","Non-code text input may yield irrelevant output","Model may produce false positives for complex or framework-specific patterns"],"whenToPreferThis":"Choose this endpoint when you need fast, local, privacy-preserving security audits of code snippets covering the most common vulnerability classes (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization). Prefer it over generic LLM prompts when you want a structured, audit-focused response tuned for security findings. The uncensored model may surface issues that sanitized models suppress.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:39:48.597Z","isFirstParty":false,"canonicalSlug":"code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-d2674ed2"}