9 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connection strings with passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1),...
Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connection strings with passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1),...
AndroidManifest.xml analysis of an APK: targetSdk, compileSdk, debuggable, cleartext traffic, backup, sharedUserId, defined permissions, uses-feature, uses-library, exported components without a permission guard, and the...
pactlint (Tanod) source lookup: verified Solidity source, ABI and compiler settings of a contract (Sourcify) Use when an agent needs the verified source, ABI and compiler settings of a contract at a known address.
Reviews source code and returns line-numbered findings with severity and a concrete fix, combining deterministic static rules (eval, SQL concat, secrets, shell injection) with an AI review. Call it before merging or runn...
Code scan / security scan — inspect AI-generated Python/JS/TS source code BEFORE it runs. 45 deterministic AST rules return structured findings (rule_id, severity, line ranges, remediation) in ~100 ms with no code execut...
Review a built-in risky Dockerfile for embedded build secrets, mutable base images, unverified downloads, unsafe permissions, root runtime, and package-manager hygiene without building or pulling an image
Audit a built-in vulnerable OpenAPI 3.1 contract against deterministic OWASP API Security Top 10 2023 contract-level checks without active scanning
Static file triage for any file URL (defensive reverse-engineering): magic/format identification, MD5/SHA-1/SHA-256 hashes, Shannon entropy with packed-region detection, embedded-file signature scan and classified string...