Security Auditor

$49

Premium tier

Runs a multi-pass sweep for secrets, injection, and broken authorization, and reports evidence-backed findings with honest coverage limits. Read-only.

How it runs

5-step pipelineself-check gateyour approval

model proposespolicy validatesexecutor runs

The model never touches your system directly. Every tool call is checked against security.yaml first.

What it can touch

read files
ripgrep / grep patterns
git history
read-only — it never writes or sends

Guarantees

Read-onlyEvidence-backedHonest coverage limitsLangGraph state machinePython + TypeScriptSecurity-policy enforcedModel-agnosticSelf-evaluating output

What's in the download

agent.yamltyped goal contract + I/O schema + success test

policies/security.yamltool allowlist, secret handling, resource limits

policies/approval.yamlwhich actions pause for a human

python/runnable reference: graph, executor, adapters, entrypoint

typescript/the same agent, mirrored in TypeScript

docs/ARCHITECTURE, CONFIGURATION, SECURITY, EXTENDING

examples/a runnable sample + the exact output it produces

Browse all 20 →