# Code Security Audit (SQLi, XSS, Auth Bypass, Secret Leaks, Unsafe Deserialization)

> Code Security Audit (SQLi, XSS, Auth Bypass, Secret Leaks, Unsafe Deserialization) is a paid API for AI agents from linked-aimed-reproduced-changing.trycloudflare.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-12).

Analyzes a code snippet for common security vulnerabilities including SQL injection, XSS, authentication bypass, secret leaks, and unsafe deserialization.

## Facts

- Endpoint: POST https://linked-aimed-reproduced-changing.trycloudflare.com/v1/coder/security-audit?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-6cef3796
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Ml7lHUztz4TLguvB3GPVq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-6cef3796 -d '<json body>'
```

Example prompt: Can you run a security audit on this code snippet and flag any SQL injection, XSS, auth bypass, secret leaks, or unsafe deserialization issues I should worry about?

## When to prefer this

Choose this endpoint when you need a fast, targeted security scan focused specifically on the five most critical code-level vulnerability classes (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization) without a full code review. It is more focused than the structured code review sibling endpoint and faster than a full agentic task. Ideal for pre-commit hooks, CI pipelines, or quick spot-checks on individual functions or files.

## Known failure modes

- Empty or missing code snippet in the request body yields no findings or an error
- Unsupported or obfuscated code formats may reduce detection accuracy
- Very long code snippets may exceed context limits and return partial results
- Rate limiting or payment failure (x402) blocks the request entirely
- Non-code text input may return irrelevant or empty findings

## How this service works

Security audit of code snippet (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization).

## Output

A structured list of security findings for the submitted code snippet, each identifying the vulnerability type (e.g. SQLi, XSS, auth bypass, secret leak, unsafe deserialization), its location or context within the code, severity, and recommended remediation steps.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "usage": {
   "type": "object"
  },
  "choices": {
   "type": "array"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/code-security-audit-sqli-xss-auth-bypass-secret-leaks-unsafe-6cef3796/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from linked-aimed-reproduced-changing.trycloudflare.com](https://www.zero.xyz/host/linked-aimed-reproduced-changing.trycloudflare.com/llms.txt)