Security Audit Pack

★Trustedv1.0.0MIT✔Verified88

by AgentNode · published 22 days ago · toolpack

Scan code for security vulnerabilities using static analysis.

Audit code for OWASP Top 10 vulnerabilities, SQL injection, XSS, and more. Uses Semgrep and Bandit rules for Python, JavaScript, and other languages.

langchaincrewaigeneric

Quick Start

bash
agentnode install security-audit-pack

Usage

From package
python
from security_audit_pack.tool import run

result = run(
    action="audit_security",
    path="/workspace/my-api",
    language="python",
    standards=["owasp-top-10", "cwe-top-25"],
    severity_threshold="medium"
)

print(f"Files analyzed: {result['files_analyzed']}")
print(f"Issues found: {result['total_issues']}")
print(f"Critical: {result['severity_counts']['critical']}")
print(f"High: {result['severity_counts']['high']}")
print(f"Medium: {result['severity_counts']['medium']}\n")

for issue in result["issues"][:5]:
    print(f"[{issue['severity'].upper()}] {issue['title']}")
    print(f"  File: {issue['file']}:{issue['line']}")
    print(f"  CWE: {issue['cwe_id']} — {issue['cwe_name']}")
    print(f"  Fix: {issue['remediation']}")
    print()

Verification

high confidence88/100✔ Verified
smokeReturned valid result
+25/25
testsAuto-generated tests only
+8/15
importAll tools imported successfully
+15/15
installInstalled in 2.0s
+15/15
contractAll contract checks passed
+10/10
warningsNo warnings
0/0
determinismOutput consistency check
+5/5
reliability3/3 runs passed
+10/10

Package installs and imports correctly. runtime checks passed.

✔install2.0s
✔import110ms
✔smoke143ms
✔tests1.0s

This package was executed and validated by AgentNode before listing. Install, import, and runtime checks passed.

Python 3.12.3ffmpegpopplertesseractuv

Last verified 18d ago· Runner v2.0.0

Use this when you need to...

  • ›Scan Python code for SQL injection and XSS vulnerabilities
  • ›Audit Node.js applications against OWASP Top 10 security risks
  • ›Detect insecure cryptographic practices in source files
  • ›Generate security compliance reports with remediation guidance
  • ›Identify unsafe deserialization and command injection patterns

README

Security Audit Pack

Scan code for security vulnerabilities using static analysis. Audit code for OWASP Top 10 and CWE Top 25 using Semgrep and Bandit rule engines.

Quick Start

agentnode install security-audit-pack

from security_audit_pack.tool import run

result = run(action="audit_security", path="/workspace/my-project", language="python")
print(f"Issues found: {result['total_issues']}")

Usage

OWASP Top 10 Audit

result = run(
    action="audit_security",
    path="/workspace/api",
    language="python",
    standards=["owasp-top-10"]
)
for issue in result["issues"]:
    print(f"[{issue['severity']}] {issue['title']} — {issue['file']}:{issue['line']}")

Targeted Rule Scan

result = run(
    action="audit_security",
    path="/workspace/web-app/src",
    language="javascript",
    rules=["xss", "sql-injection", "prototype-pollution"]
)

Generate Compliance Report

result = run(
    action="audit_security",
    path="/workspace/api",
    language="python",
    standards=["owasp-top-10", "cwe-top-25"],
    output_format="report",
    output_path="/tmp/security-report.json"
)
print(f"Report saved: {result['report_path']}")

API Reference

CapabilityDescription
audit_securityStatic analysis for OWASP Top 10, CWE Top 25, and custom security rules

Supported languages: Python, JavaScript, TypeScript, Java, Go, Ruby, PHP.

Requirements

No API keys required. Semgrep and Bandit run locally.

License

MIT

Version History

v1.0.0latestverified
3/16/2026

Capabilities

security_auditaudit_securitytool

Permissions

This package declares the following access levels. Review before installing.

Networknone
Filesystemworkspace_read
Code Executionlimited_subprocess
Data Accessinput_only
User Approvalonce
bash
agentnode install security-audit-pack

Files (3)

License

MIT

Stats

Downloads0
Installs0
Versionv1.0.0
Published3/16/2026
Channelstable
Typetoolpack
Entrypointsecurity_audit_pack.tool

Compatibility

Frameworks

langchaincrewaigeneric

Runtime

python

Python Version

>=3.10

Trust & Security

Publisher★Trusted
SignatureNone
ProvenanceNone
Security Issues0

Publisher

A

AgentNode

@agentnode

Report an issue with this package