code-audit

Reviews authorized source code for security weaknesses and produces findings with evidence and remediation advice.

When to use it

Use for white-box audits, security reviews of pull requests or diffs, static analysis, and investigation of dangerous APIs or security weaknesses.

Give it an authorized source repository to audit; it returns findings with locations, data flows, proofs of concept, and remediation advice.