AI Security Code Review Agent on Taskade Genesis. Every PR gets a security pass before human review: SQLi, XSS, hardcoded secrets, auth bypass, broken access control, insecure deserialization, and 12+ OWASP Top-10 patterns.
What's Included
- Secret Scanner: AWS / GCP / OpenAI / Stripe key patterns + entropy check
- OWASP Top-10 Pass: Reads diffs for the 12 most common vuln patterns
- Auth Boundary Watch: Flags any new endpoint that lacks an auth middleware
- Dependency Risk: Reads
package.json/pyproject.tomldiffs against known-vulnerable versions - Approve / Block: Posts a structured PR comment + sets a status check
How To Use
- Clone this app
- Connect GitHub via webhook
- The security agent reads every PR diff and posts findings as a PR comment
- Configure block thresholds (high-severity → block merge; medium → warn-only)
