{"_id":"@aiagentkit/agent-security-audit","_rev":"2-14309a9d88092e6c789a311209a8f471","name":"@aiagentkit/agent-security-audit","dist-tags":{"latest":"1.0.1"},"versions":{"1.0.0":{"name":"@aiagentkit/agent-security-audit","version":"1.0.0","keywords":["ai","security","audit","owasp","vulnerability-scanning","code-security"],"author":{"name":"Marcelo Adan"},"license":"MIT","_id":"@aiagentkit/agent-security-audit@1.0.0","maintainers":[{"name":"npm7381","email":"marcelomp024@gmail.com"}],"homepage":"https://github.com/MarceloAdan73/ai-agent-toolkit#readme","bugs":{"url":"https://github.com/MarceloAdan73/ai-agent-toolkit/issues"},"bin":{"agent-security-audit":"dist/index.js"},"dist":{"shasum":"80eb701995aa117836d005bff0e89c2c6add8ccd","tarball":"https://registry.npmjs.org/@aiagentkit/agent-security-audit/-/agent-security-audit-1.0.0.tgz","fileCount":47,"integrity":"sha512-bwLZG9OaSP9Vg8xJBRnrZ/5LaoYZlmOMKkYNYoKB3xIpBVJKH4cw2JTuPRhzKMLqE/IK0W6jeeRtrFGBR4H31Q==","signatures":[{"sig":"MEUCIHa4lLDXMgXRn/8XgZ+3mwfaAxRQ7LLUDks8eBB0Oo6JAiEAyXaWNf9i5pUZTGprJSGnUkopvwuMXCe2nX5AL/DMLzs=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":108979},"main":"dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"gitHead":"d8265ab498265875cdaeeee65685324d75ba8c27","scripts":{"dev":"tsx index.ts","test":"vitest run","audit":"node dist/index.js --path .","build":"tsc","start":"node dist/index.js","typecheck":"tsc --noEmit","test:watch":"vitest","prepublishOnly":"npm run build","test:integration":"vitest run tests/providerIntegration.test.ts"},"_npmUser":{"name":"npm7381","email":"marcelomp024@gmail.com"},"repository":{"url":"git+https://github.com/MarceloAdan73/ai-agent-toolkit.git","type":"git","directory":"agent-security-audit"},"_npmVersion":"11.17.0","description":"AI-powered security audit tool that analyzes source code for vulnerabilities (OWASP Top 10)","directories":{},"_nodeVersion":"26.5.0","dependencies":{"ora":"^9.4.1","dotenv":"^16.4.7","pdfkit":"^0.19.1","commander":"^12.1.0","@google/genai":"^1.52.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.1.1","typescript":"^5.7.0","@types/node":"^22.0.0","@types/pdfkit":"^0.17.6"},"_npmOperationalInternal":{"tmp":"tmp/agent-security-audit_1.0.0_1784545905879_0.09027519796458816","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"@aiagentkit/agent-security-audit","version":"1.0.1","description":"AI-powered security audit tool that analyzes source code for vulnerabilities (OWASP Top 10)","main":"dist/index.js","bin":{"agent-security-audit":"dist/index.js"},"engines":{"node":">=18"},"type":"module","license":"MIT","author":{"name":"Marcelo Adan"},"scripts":{"build":"tsc","start":"node dist/index.js","dev":"tsx index.ts","audit":"node dist/index.js --path .","test":"vitest run","test:watch":"vitest","typecheck":"tsc --noEmit","test:integration":"vitest run tests/providerIntegration.test.ts","prepublishOnly":"npm run build"},"repository":{"type":"git","url":"git+https://github.com/MarceloAdan73/ai-agent-toolkit.git","directory":"agent-security-audit"},"keywords":["ai","security","audit","owasp","vulnerability-scanning","code-security"],"dependencies":{"@google/genai":"^1.52.0","commander":"^12.1.0","dotenv":"^16.4.7","ora":"^9.4.1","pdfkit":"^0.19.1"},"devDependencies":{"@types/node":"^22.0.0","@types/pdfkit":"^0.17.6","tsx":"^4.19.0","typescript":"^5.7.0","vitest":"^3.1.1"},"gitHead":"484b69be500055c0bf3431664360deb66574df98","types":"./dist/index.d.ts","_id":"@aiagentkit/agent-security-audit@1.0.1","bugs":{"url":"https://github.com/MarceloAdan73/ai-agent-toolkit/issues"},"homepage":"https://github.com/MarceloAdan73/ai-agent-toolkit#readme","_nodeVersion":"26.5.0","_npmVersion":"11.17.0","dist":{"integrity":"sha512-btV/t/8NzZsvPgg9BqgEU13LZDDrgnaPeNBaYWwiZLBnKD3nCkY+StLTVmjKtXxOM1UUZ6PYBQkQaoZEA2APdw==","shasum":"2b4871f9fe06cffe0b8180d272dc46227856fe15","tarball":"https://registry.npmjs.org/@aiagentkit/agent-security-audit/-/agent-security-audit-1.0.1.tgz","fileCount":47,"unpackedSize":112229,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCID1L+3gEkmb2aDWiY0tOhWocvGzCQ2tJIPHb914y9WQdAiEA17xLFjs6/bf1aPYguEvFsqVmrWY/5sODL8DsiS/E2VQ="}]},"_npmUser":{"name":"npm7381","email":"marcelomp024@gmail.com"},"directories":{},"maintainers":[{"name":"npm7381","email":"marcelomp024@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/agent-security-audit_1.0.1_1785639427313_0.4114729325249722"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-20T11:11:45.696Z","modified":"2026-08-02T02:57:07.609Z","1.0.0":"2026-07-20T11:11:46.012Z","1.0.1":"2026-08-02T02:57:07.442Z"},"bugs":{"url":"https://github.com/MarceloAdan73/ai-agent-toolkit/issues"},"author":{"name":"Marcelo Adan"},"license":"MIT","homepage":"https://github.com/MarceloAdan73/ai-agent-toolkit#readme","keywords":["ai","security","audit","owasp","vulnerability-scanning","code-security"],"repository":{"type":"git","url":"git+https://github.com/MarceloAdan73/ai-agent-toolkit.git","directory":"agent-security-audit"},"description":"AI-powered security audit tool that analyzes source code for vulnerabilities (OWASP Top 10)","maintainers":[{"name":"npm7381","email":"marcelomp024@gmail.com"}],"readme":"# agent-security-audit\n\nAudita seguridad del código contra OWASP Top 10 usando IA.\n\n## Instalación\n\n```bash\n# Global\nnpm install -g @aiagentkit/agent-security-audit\n\n# O sin instalar\nnpx @aiagentkit/agent-security-audit --path ./src\n```\n\n## Uso\n\n```bash\nagent-security-audit --path ./src                           # auditar todo src/\nagent-security-audit --path ./src/utils.ts                  # un solo archivo\nagent-security-audit --path ./src --severity warning        # solo warning y critical\nagent-security-audit --path ./src --extensions .ts,.prisma  # solo archivos .ts y .prisma\nagent-security-audit --path ./src --format html             # salida HTML\nagent-security-audit --path ./src --dry-run                 # preview sin escribir\nagent-security-audit --path ./src --verbose                 # logs detallados\n```\n\n## Proveedores\n\n| Provider | Modelo Default | Auth | Notas |\n|----------|---------------|------|-------|\n| gemini | `gemini-2.5-flash` | `GEMINI_API_KEY` | Free tier disponible |\n| openai | `gpt-4o` | `OPENAI_API_KEY` | GPT-4o, GPT-4o-mini |\n| anthropic | `claude-sonnet-4-20250514` | `ANTHROPIC_API_KEY` | Claude |\n| deepseek | `deepseek-chat` | `DEEPSEEK_API_KEY` | El más barato |\n| ollama | modelo instalado | Sin key | Local, gratis, privacidad |\n\n**Auto-detección**: Si no especificas `--provider`, detecta automáticamente qué tienes configurado (keys en `.env` o Ollama corriendo).\n\n## Flags\n\n| Flag | Descripción | Default |\n|------|-------------|---------|\n| `--path` | Archivo o carpeta a procesar | (requerido) |\n| `--provider` | `gemini` \\| `openai` \\| `anthropic` \\| `deepseek` \\| `ollama` | auto-detectado |\n| `--model` | Modelo a usar | según provider |\n| `--base-url` | URL del servidor (Ollama) | `http://localhost:11434` |\n| `--api-key` | API key (opcional para Ollama) | .env |\n| `--max-chars` | Límite de chars por archivo | 15000 |\n| `--output` | Carpeta/archivo de salida | junto al archivo |\n| `--extensions` | Extensiones a procesar (CSV: `.ts,.prisma`) | todas |\n| `--format` | Formato de salida `terminal` \\| `markdown` \\| `html` \\| `pdf` | terminal |\n| `--severity` | Severidad mínima: `info` \\| `warning` \\| `critical` | info |\n| `--dry-run` | Solo preview, no escribir | false |\n| `--verbose` | Logs detallados | false |\n\n## Features\n\n- **OWASP Top 10**: SQL Injection, XSS, Secrets, Path Traversal, Auth, CSRF, SSRF, Crypto, Dependencies\n- **Categorías de seguridad**: cada finding indica la categoría OWASP\n- **Filtro por severidad**: `--severity warning` para ver solo issues importantes\n- **Cache**: hash MD5 para no regenerar archivos sin cambios\n- **Auto-detección**: detecta provider disponible al iniciar\n- **Resiliencia**: 3 reintentos con backoff ante errores de API\n- **Truncado**: archivos > `--max-chars` se recortan con aviso\n- **Filtro por extensión**: `--extensions .ts,.prisma` para limitar tipos de archivo\n\n## Requisitos\n\n- Node.js >= 18\n- Un proveedor de IA configurado (API key o Ollama local)\n\n## Licencia\n\nMIT\n\nParte de [AI Agent Toolkit](https://github.com/MarceloAdan73/ai-agent-toolkit).\n","readmeFilename":"README.md"}