sec-af
AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
File Explorer
- go.yml
- architecture.png
- hero-b-swarm.png
- REFACTOR-PLAN.md
- benchmark-analysis.json
- dvga-benchmark-result.json
- result.json
- main.go
- DESIGN.md
- bind.go
- bind_test.go
- unwrap.go
- unwrap_test.go
- wire.go
- wire_test.go
- chain_correlation_prompt_seeded.txt
- chain_correlation_prompt_unseeded.txt
- duplicate_check_prompt.txt
- dedup.go
- dedup_test.go
- golden_test.go
- assemble_finding.json
- auth_depth_label.json
- auth_target_cwes.json
- business_logic_enabled.json
- business_logic_prompt_with_depth_prompt.txt
- cascade_binding.json
- crypto_prompt_both_terms.txt
- crypto_prompt_mixed.txt
- crypto_prompt_none.txt
- crypto_term_tables.json
- crypto_usage_partition.json
- direct_prompt_api_security.txt
- direct_prompt_config_secrets.txt
- direct_prompt_crypto.txt
- direct_prompt_data_exposure.txt
- direct_prompt_sha256.json
- direct_prompt_supply_chain.txt
- enrich_location_input.json
- enrich_location_prompt.txt
- hunter_empty_locations.json
- hunter_results.json
- hunter_skips.json
- normalize_depth.json
- prompt_api_security_standard.txt
- prompt_api_security_thorough.txt
- prompt_auth_quick.txt
- prompt_auth_standard.txt
- prompt_auth_thorough.txt
- prompt_business_logic_standard.txt
- prompt_business_logic_thorough.txt
- prompt_config_secrets_standard.txt
- prompt_config_secrets_thorough.txt
- prompt_crypto_standard.txt
- prompt_crypto_thorough.txt
- prompt_data_exposure_quick.txt
- prompt_data_exposure_standard.txt
- prompt_data_exposure_thorough.txt
- prompt_dos_quick.txt
- prompt_dos_standard.txt
- prompt_dos_thorough.txt
- prompt_injection_quick.txt
- prompt_injection_standard.txt
- prompt_injection_thorough.txt
- prompt_ssrf_quick.txt
- prompt_ssrf_standard.txt
- prompt_ssrf_thorough.txt
- prompt_supply_chain_standard.txt
- prompt_supply_chain_thorough.txt
- prompt_xss_standard.txt
- prompt_xss_thorough.txt
- quick_strategies.json
- recon_context_block_business_logic.txt
- recon_context_block_business_logic_empty.txt
- recon_context_block_dos.txt
- recon_context_block_dos_empty.txt
- recon_context_block_ssrf.txt
- recon_context_block_xss.txt
- scan_locations_input.json
- scan_locations_prompt.txt
- select_strategies.json
- strategy_runner_order.json
- recon_fixture.json
- recon_small.json
- api_security.go
- auth.go
- business_logic.go
- config_secrets.go
- context_blocks.go
- crypto.go
- data_exposure.go
- doc.go
- dos.go
- golden_test.go
- hunt.go
- hunt_test.go
- hunters_test.go
- injection.go
- logic.go
- scan_enrich.go
- scan_enrich_test.go
- ssrf.go
- supply_chain.go
- xss.go
- apply_metadata.json
- apply_validated_chain.json
- assemble.json
- chain_builder_prompt.txt
- chain_builder_prompt_input.json
- cross_service_prompt_A.txt
- cross_service_prompt_B.txt
- dast_prompt_A.txt
- dast_prompt_B.txt
- dep_reachability_input_A.json
- dep_reachability_input_C.json
- dep_reachability_prompt_A.txt
- dep_reachability_prompt_B.txt
- dep_reachability_prompt_C.txt
- exploit_prompt_A.txt
- exploit_prompt_B.txt
- fallback.json
- priority_sort.json
- run_prove.json
- run_verifier.json
- sanitization_prompt_A.txt
- sanitization_prompt_B.txt
- tracer_prompt_A.txt
- tracer_prompt_B.txt
- verdict_prompt_A.txt
- verdict_prompt_B.txt
- agents_test.go
- assembler.go
- assembler_test.go
- chain_builder.go
- chain_builder_test.go
- cross_service.go
- dast_verifier.go
- dep_reachability.go
- doc.go
- exploit.go
- golden_test.go
- prompts_test.go
- prove.go
- prove_test.go
- sandbox.go
- sandbox_test.go
- sanitization.go
- shared.go
- tracer.go
- verdict.go
- verifier.go
- architecture_context_block_A.txt
- architecture_context_block_B.txt
- architecture_prompt.txt
- config_scanner_prompt.txt
- data_flow_prompt_A.txt
- data_flow_prompt_B.txt
- dependencies_prompt.txt
- parse_architecture.json
- parse_config_report.json
- parse_data_flow.json
- parse_dependency_report.json
- parse_primitives.json
- parse_security_context.json
- repo_metrics.json
- run_recon.json
- security_context_prompt_A.txt
- security_context_prompt_B.txt
- architecture.go
- config_scanner.go
- data_flow.go
- dependencies.go
- doc.go
- findings.go
- findings_test.go
- golden_test.go
- metrics.go
- metrics_test.go
- parsers.go
- parsers_test.go
- prompts_test.go
- recon.go
- recon_test.go
- security_context.go
- generate_prompt.txt
- generate_prompt_min.txt
- run_prompt.txt
- run_prompt_empty.txt
- remediation.go
- remediation_test.go
- edgecases_input.json
- edgecases_strict.json
- gen_strictify_golden.py
- strictified_fixtures.json
- aix.go
- aix_test.go
- order_test.go
- appx.go
- fake.go
- audit.go
- audit_test.go
- compliance_map.json
- mapping.go
- mapping_test.go
- table_gen.go
- ai.go
- audit.go
- budget.go
- config_test.go
- depth.go
- diffanalysis.go
- diffanalysis_test.go
- ai_gate_assess_reachability.txt
- ai_gate_check_duplicate.txt
- ai_gate_classify_severity.txt
- ai_gate_select_strategy_empty_candidates.txt
- ai_gate_select_strategy_standard.txt
- phase_guidance.json
- schema_guidance_ArchitectureMapRaw.txt
- schema_guidance_ChainCorrelationResult.txt
- schema_guidance_ComplianceGate.txt
- schema_guidance_ConfigReportRaw.txt
- schema_guidance_CrossServiceFinding.txt
- schema_guidance_CWEExpansion.txt
- schema_guidance_DastVerificationResult.txt
- schema_guidance_DataFlowMapRaw.txt
- schema_guidance_DataFlowTrace.txt
- schema_guidance_DependencyReportRaw.txt
- schema_guidance_DuplicateCheck.txt
- schema_guidance_EnrichedFinding.txt
- schema_guidance_ExploitHypothesis.txt
- schema_guidance_PolicyEvalResult.txt
- schema_guidance_ReachabilityGate.txt
- schema_guidance_ReachabilityProof.txt
- schema_guidance_RemediationSuggestion.txt
- schema_guidance_SanitizationResult.txt
- schema_guidance_ScanLocationsResult.txt
- schema_guidance_SecurityContextRaw.txt
- schema_guidance_SeverityClassification.txt
- schema_guidance_StrategySelection.txt
- schema_guidance_VerdictDecision.txt
- schema_retry_ArchitectureMapRaw.txt
- schema_retry_ChainCorrelationResult.txt
- schema_retry_ComplianceGate.txt
- schema_retry_ConfigReportRaw.txt
- schema_retry_CrossServiceFinding.txt
- schema_retry_CWEExpansion.txt
- schema_retry_DastVerificationResult.txt
- schema_retry_DataFlowMapRaw.txt
- schema_retry_DataFlowTrace.txt
- schema_retry_DependencyReportRaw.txt
- schema_retry_DuplicateCheck.txt
- schema_retry_EnrichedFinding.txt
- schema_retry_ExploitHypothesis.txt
- schema_retry_PolicyEvalResult.txt
- schema_retry_ReachabilityGate.txt
- schema_retry_ReachabilityProof.txt
- schema_retry_RemediationSuggestion.txt
- schema_retry_SanitizationResult.txt
- schema_retry_ScanLocationsResult.txt
- schema_retry_SecurityContextRaw.txt
- schema_retry_SeverityClassification.txt
- schema_retry_StrategySelection.txt
- schema_retry_VerdictDecision.txt
- with_file_write_hint_basic.txt
- with_file_write_hint_empty_cwd.txt
- with_file_write_hint_relative_cwd.txt
- with_file_write_hint_trailing_whitespace.txt
- with_phase_guidance_empty.txt
- with_phase_guidance_hunt.txt
- with_phase_guidance_none.txt
- with_phase_guidance_padded_mixed_case.txt
- with_phase_guidance_prove.txt
- with_phase_guidance_recon.txt
- with_phase_guidance_unknown.txt
- aigate.go
- aigate_test.go
- harnesswrapper.go
- harnesswrapper_test.go
- prompts.go
- prompts_test.go
- retry.go
- retry_test.go
- ArchitectureMapRaw.json
- ChainCorrelationResult.json
- ComplianceGate.json
- ConfigReportRaw.json
- CrossServiceFinding.json
- CWEExpansion.json
- DastVerificationResult.json
- DataFlowMapRaw.json
- DataFlowTrace.json
- DependencyReportRaw.json
- DuplicateCheck.json
- EnrichedFinding.json
- ExploitHypothesis.json
- PolicyEvalResult.json
- ReachabilityGate.json
- ReachabilityProof.json
- RemediationSuggestion.json
- SanitizationResult.json
- ScanLocationsResult.json
- SecurityContextRaw.json
- SeverityClassification.json
- StrategySelection.json
- VerdictDecision.json
- fieldorder.go
- harnessx_test.go
- run.go
- schema.go
- schema_parity_test.go
- baseline.json
- baseline_empty.json
- monitoring.go
- monitoring_test.go
- audit.go
- audit_test.go
- node.go
- node_test.go
- register.go
- resolve.go
- resolve_test.go
- checkpoint_created_at.json
- checkpoint_prove.txt
- checkpoint_prove_empty.txt
- checkpoint_recon.txt
- default_strategies.json
- merge_recon_findings.json
- prioritize_findings.json
- progress_fields.json
- progress_model_dump_json.json
- progress_notes.json
- prover_cap.json
- reachability_fallback_tags.json
- reachability_summary.txt
- verified_finding_fallback.json
- fallback_finding.json
- findings_fixture.json
- recon_fixture.json
- verified_fixture.json
- budget.go
- checkpoint.go
- doc.go
- golden_test.go
- merge.go
- orch.go
- orch_test.go
- output.go
- output_test.go
- progress.go
- reachability.go
- run.go
- run_test.go
- strategies.go
- audit_result.compliance_report.md
- audit_result.full.json
- audit_result.full_compact.json
- audit_result.report.md
- audit_result.sarif.json
- audit_result.summary.json
- audit_result_edge.compliance_report.md
- audit_result_edge.full.json
- audit_result_edge.full_compact.json
- audit_result_edge.report.md
- audit_result_edge.sarif.json
- audit_result_edge.summary.json
- audit_result_empty.compliance_report.md
- audit_result_empty.full.json
- audit_result_empty.full_compact.json
- audit_result_empty.report.md
- audit_result_empty.sarif.json
- audit_result_empty.summary.json
- audit_result_floats.compliance_report.md
- audit_result_floats.full.json
- audit_result_floats.full_compact.json
- audit_result_floats.report.md
- audit_result_floats.sarif.json
- audit_result_floats.summary.json
- audit_result_report.compliance_report.md
- audit_result_report.full.json
- audit_result_report.full_compact.json
- audit_result_report.report.md
- audit_result_report.sarif.json
- audit_result_report.summary.json
- audit_result.json
- audit_result_edge.json
- audit_result_empty.json
- audit_result_floats.json
- audit_result_report.json
- compliance_report.go
- compliance_report_test.go
- golden_test.go
- json_output.go
- json_output_test.go
- pyjson_equivalence_test.go
- pyjson_local.go
- pyjson_local_test.go
- report.go
- report_test.go
- sarif.go
- sarif_test.go
- cwe_expansion_prompt_full.txt
- cwe_expansion_prompt_no_strategies.txt
- default_strategies.json
- prioritize_findings.json
- prove_phase_unverified.json
- prove_phase_unverified_notes.json
- prover_cap.json
- recon_summary_full.txt
- recon_summary_minimal.txt
- track_drop.json
- findings_fixture.json
- prove_phase_input.json
- recon_fixture.json
- dag_test.go
- doc.go
- dump.go
- golden_test.go
- hunt.go
- phases.go
- prove.go
- prove_test.go
- recon.go
- remediation.go
- validate.go
- validate_modelspec_test.go
- validate_roundtrip_test.go
- validate_test.go
- build_prompt.txt
- build_prompt_repeated.txt
- evaluate_policy_prompt.txt
- policies.go
- policies_test.go
- .gitkeep
- api_security.txt
- auth.txt
- business_logic.txt
- config_secrets.txt
- crypto.txt
- data_exposure.txt
- dos.txt
- enrich_finding.txt
- injection.txt
- logic.txt
- scan_locations.txt
- ssrf.txt
- supply_chain.txt
- xss.txt
- .gitkeep
- chain_builder.txt
- cross_service.txt
- dast_verifier.txt
- dep_reachability.txt
- exploit.txt
- sanitization.txt
- tracer.txt
- verdict.txt
- verifier.txt
- .gitkeep
- architecture.txt
- config_scanner.txt
- data_flow.txt
- dependencies.txt
- security_context.txt
- policy_eval.txt
- remediation.txt
- prompts.go
- prompts_test.go
- dumps_ArchitectureMap_compact.txt
- dumps_ArchitectureMap_indent2.txt
- dumps_ConfigReport_compact.txt
- dumps_ConfigReport_indent2.txt
- dumps_DependencyReport_compact.txt
- dumps_DependencyReport_indent2.txt
- dumps_edge_cases_compact.txt
- dumps_edge_cases_indent2.txt
- dumps_SecurityContext_compact.txt
- dumps_SecurityContext_indent2.txt
- model_dump_json_floats.json
- model_dump_json_models.json
- models_fixture.json
- modeljson.go
- modeljson_test.go
- pyfmt.go
- pyfmt_test.go
- pyjson.go
- pyjson_models_test.go
- pyjson_test.go
- python_input_schemas.json
- python_input_types.json
- doc.go
- handler_input.go
- handler_input_test.go
- helpers_test.go
- hunt.go
- hunt_test.go
- input_schemas.go
- input_schemas_test.go
- inputs.go
- inputs_test.go
- names.go
- phases.go
- phases_test.go
- prove.go
- prove_test.go
- recon.go
- recon_test.go
- register.go
- register_test.go
- validate.go
- validate_test.go
- api_security.txt
- auth.txt
- config_secrets.txt
- crypto.txt
- data_exposure.txt
- framework_hints_aliases.txt
- framework_hints_all_known.txt
- framework_hints_empty.txt
- framework_hints_for_context.txt
- framework_hints_padded.txt
- framework_hints_unknown_only.txt
- generic.txt
- injection.txt
- language_hints_all_known.txt
- language_hints_empty.txt
- language_hints_for_context.txt
- language_hints_mixed_case_and_repeat.txt
- language_hints_single.txt
- language_hints_unknown_only.txt
- logic.txt
- prune_config_secrets.json
- prune_crypto.json
- prune_injection.json
- prune_keys.json
- prune_supply_chain.json
- prune_unknown_strategy.json
- strategy_dispatch.json
- supply_chain.txt
- recon_fixture.json
- context.go
- context_test.go
- hints.go
- hints_test.go
- model_keys.json
- compliance.go
- defaults.go
- doc.go
- gates.go
- hunt.go
- input.go
- model_keys_test.go
- output.go
- policies.go
- prove.go
- recon.go
- schemas_test.go
- timestamp.go
- timestamp_test.go
- uuid.go
- uuid_test.go
- views.go
- scoring.go
- scoring_test.go
- gen_compliance_table.py
- gen_golden.py
- gen_golden_output.py
- gen_golden_phases.py
- gen_golden_prove.py
- gen_input_types.py
- gen_model_keys.py
- gen_schemas.py
- .gitignore
- agentfield-package.yaml
- doc.go
- docker-entrypoint.sh
- Dockerfile
- go.mod
- go.sum
- Makefile
- README.md
- __init__.py
- _framework_hints.py
- _language_hints.py
- _scan_enrich.py
- api_security.py
- auth.py
- business_logic.py
- config_secrets.py
- crypto.py
- data_exposure.py
- dos.py
- injection.py
- logic.py
- ssrf.py
- supply_chain.py
- xss.py
- __init__.py
- assembler.py
- chain_builder.py
- cross_service.py
- dast_verifier.py
- dep_reachability.py
- exploit.py
- sandbox.py
- sanitization.py
- tracer.py
- verdict.py
- verifier.py
- __init__.py
- _parsers.py
- architecture.py
- config_scanner.py
- data_flow.py
- dependencies.py
- security_context.py
- __init__.py
- _utils.py
- dedup.py
- remediation.py
- __init__.py
- mapping.py
- __init__.py
- compliance_report.py
- json_output.py
- report.py
- sarif.py
- .gitkeep
- api_security.txt
- auth.txt
- business_logic.txt
- config_secrets.txt
- crypto.txt
- data_exposure.txt
- dos.txt
- enrich_finding.txt
- injection.txt
- logic.txt
- scan_locations.txt
- ssrf.txt
- supply_chain.txt
- xss.txt
- .gitkeep
- chain_builder.txt
- cross_service.txt
- dast_verifier.txt
- dep_reachability.txt
- exploit.txt
- sanitization.txt
- tracer.txt
- verdict.txt
- verifier.txt
- .gitkeep
- architecture.txt
- config_scanner.txt
- data_flow.txt
- dependencies.txt
- security_context.txt
- policy_eval.txt
- remediation.txt
- __init__.py
- hunt.py
- phases.py
- prove.py
- recon.py
- __init__.py
- compliance.py
- gates.py
- hunt.py
- input.py
- output.py
- prove.py
- recon.py
- views.py
- __init__.py
- app.py
- audit.py
- config.py
- context.py
- diff_analysis.py
- harness.py
- monitoring.py
- orchestrator.py
- policies.py
- scoring.py
- __init__.py
- conftest.py
- test_compliance.py
- test_compliance_report.py
- test_config.py
- test_dedup.py
- test_diff_analysis.py
- test_hunt_crypto.py
- test_hunt_include_paths.py
- test_json_output.py
- test_monitoring.py
- test_policies.py
- test_prove_phase_demotion.py
- test_recon_findings.py
- test_sarif.py
- test_schemas.py
- test_scoring.py
- test_strategy_selection.py
- .env.example
- .gitignore
- agentfield-package.yaml
- docker-compose.go.yml
- docker-compose.yml
- Dockerfile
- LICENSE
- main.py
- pyproject.toml
- pyrightconfig.json
- README.md
- test_harness.py
# Use via CDN
jsDelivrjsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.
Command Glossary
Commands referenced in this DOCs, explained below.
docker build
View Details ▼
docker build
Build an image from a Dockerfile.
docker build .
Build a Docker image using the Dockerfile in the current directory:
docker build {{github.com/creack/docker-firefox}}
Build a Docker image from a Dockerfile at a specified URL:
docker build {{[-t|--tag]}} {{name:tag}} .
Build a Docker image and tag it:
docker compose up
View Details ▼
docker compose up
Start and run Docker services defined in a Compose file.
docker compose up
Start all services defined in the docker-compose file:
docker compose up {{[-d|--detach]}}
Start services in the background (detached mode):
docker compose up --build
Start services and rebuild images before starting:
done
View Details ▼
done
This shell keyword is used with `for`, `while`, `select`, and `until` to mark the end of a loop.
tldr for
View documentation for the `for` keyword:
tldr while
View documentation for the `while` keyword:
tldr select
View documentation for the `select` keyword:
git clone
View Details ▼
git clone
Clone an existing repository.
git clone {{remote_repository_location}} {{path/to/directory}}
Clone an existing repository into a new directory (the default directory is the repository name):
git clone --recursive {{remote_repository_location}}
Clone an existing repository and its submodules:
git clone {{[-n|--no-checkout]}} {{remote_repository_location}}
Clone only the `.git` directory of an existing repository:
opencode
View Details ▼
opencode
An AI coding agent.
Some subcommands such as `auth`, `models`, `web`, etc. have their own usage documentation.
opencode
Start the interactive TUI:
opencode {{[-c|--continue]}}
Continue the most recent session:
opencode run "{{message}}"
Run opencode in non-interactive mode by passing a prompt directly:
pip install
View Details ▼
pip install
Install Python packages.
pip install {{package1 package2 ...}}
Install one or more packages:
pip install {{package1 package2 ...}} {{[-U|--upgrade]}}
Upgrade all specified packages to the latest version, installing any that are not already present:
pip install {{package}}=={{version}}
Install a specific version of a package:
pytest
View Details ▼
pytest
Run Python tests.
pytest {{path/to/test_file1.py path/to/test_file2.py ...}}
Run tests from specific files:
pytest -k {{expression}}
Run tests with names matching a specific [k]eyword expression:
pytest {{[-x|--exitfirst]}}
Exit as soon as a test fails or encounters an error:
python
View Details ▼
python
Python language interpreter.
python
Start a REPL (interactive shell):
python {{path/to/file.py}}
Execute a specific Python file:
python -i {{path/to/file.py}}
Execute a specific Python file and start a REPL:
python3
View Details ▼
python3
This command is an alias of `python`.
tldr python
View documentation for the original command:
ruff check
View Details ▼
ruff check
An extremely fast Python linter. `check` is the default command - it can be omitted everywhere.
If no files or directories are specified, the current working directory is used by default.
ruff check {{path/to/file_or_directory1 path/to/file_or_directory2 ...}}
Run the linter on the given files or directories:
ruff check --fix
Apply the suggested fixes, modifying the files in-place:
ruff check --watch
Run the linter and re-lint on change:
standard
View Details ▼
standard
The JavaScript Standard Style tool for linting and fixing JavaScript code.
standard
Lint all JavaScript source files in the current directory:
standard {{path/to/file1 path/to/file2 ...}}
Lint specific JavaScript file(s):
standard --fix
Apply automatic fixes during linting:
