# dev-5090 Code Security Audit

> dev-5090 Code Security Audit is a paid API for AI agents from dev-5090-box.tailfb4c1f.ts.net, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-12).

Scans a code snippet for common security vulnerabilities including SQL injection, XSS, authentication bypass, secret leaks, and unsafe deserialization.

## Facts

- Endpoint: POST https://dev-5090-box.tailfb4c1f.ts.net/v1/coder/security-audit?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dev-5090-code-security-audit-1affccc8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_FNq1erNt94Mzoy8r20se-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dev-5090-code-security-audit-1affccc8 -d '<json body>'
```

Example prompt: Can you run a security audit on this code and flag any SQL injection, XSS, authentication bypass, secret leaks, or unsafe deserialization issues? Here's the snippet: `SELECT * FROM users WHERE id = '" + userId + "'`

## When to prefer this

Choose this endpoint when you need fast, uncensored LLM-powered security analysis of a specific code snippet without restrictions. It is ideal for quick pre-commit checks, ad-hoc code reviews, or situations where standard security tools are unavailable. Unlike static analysis tools, it can reason about logic-level auth bypass and contextual secret leaks. Prefer this over general chat endpoints when you specifically need structured security findings across the five vulnerability categories it covers.

## Known failure modes

- Empty or missing code snippet results in an error or generic response
- Very large code snippets may be truncated or exceed context limits
- Minified or obfuscated code may reduce detection accuracy
- Non-standard or uncommon languages may yield fewer findings
- Service unavailable if the RTX 5090 host is offline or unreachable
- False negatives possible for complex or multi-file vulnerabilities that require broader context

## How this service works

Security audit of code snippet (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization).

## Output

A structured security audit report identifying specific vulnerability categories found in the code (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization), with per-finding details such as location, severity, and description of the risk.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "usage": {
   "type": "object"
  },
  "choices": {
   "type": "array"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dev-5090-code-security-audit-1affccc8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dev-5090-box.tailfb4c1f.ts.net](https://www.zero.xyz/host/dev-5090-box.tailfb4c1f.ts.net/llms.txt)