An automated security scanning service that identifies vulnerabilities and hardcoded secrets in code via a simple API.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install agentkilox-code-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install agentkilox-code-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is A2A Code Audit Service?
The A2A Code Audit Service is a specialized security tool designed for AI agents and developers to perform instant static analysis on source code. It focuses on identifying high-risk issues such as hardcoded API keys, passwords, and the use of dangerous functions like eval() or shell execution. By integrating this tool into your Openclaw Skills workflow, you can ensure that generated or modified code meets security standards before deployment.
The service operates as a lightweight Cloudflare Worker, providing rapid feedback with a confidence score and detailed issue reports. It is particularly valuable for autonomous agents that need to validate their own output or for CI/CD pipelines that require a low-latency security gate.
A2A Code Audit Service Use Cases
- Performing pre-deployment security checks for AI-generated code.
- Integrating automated vulnerability scanning into CI/CD pipelines.
- Providing security analysis for agents running in environments without local tooling.
- Identifying accidental exposure of secrets and tokens in source files.
How A2A Code Audit Service Works
- The user or agent sends a POST request to the audit endpoint containing the source code string.
- The service performs static analysis to detect hardcoded secrets and dangerous functions.
- A confidence score between 0 and 100 is calculated based on the security findings.
- The service returns a detailed JSON response including line-specific issues and scan statistics.
A2A Code Audit Service Setup
To deploy the A2A Code Audit Service to your own infrastructure using Cloudflare Workers, follow these steps:
cd a2a-services/code-audit
wrangler login
wrangler deploy
Ensure you have the Wrangler CLI installed and configured with your Cloudflare account. To utilize the hosted version, include the x402-payment: 1 header in your requests to the API endpoint.
A2A Code Audit Service Data Schema & Taxonomy
The service expects a JSON payload and returns structured metadata regarding the code quality.
| Field | Description |
|---|---|
| confidenceScore | Integer (0-100) indicating code safety. |
| issues | Array of objects detailing specific vulnerabilities. |
| line | The specific line number where the issue was detected. |
| severity | Severity level of the detected issue (e.g., HIGH). |
| stats | Metadata including lines of code and scan duration. |
A2A Code Audit Service Advanced Features
- High-speed processing with response times guaranteed under 5 seconds.
- Support for multiple programming languages with automated detection.
- Granular severity levels and confidence ratings for every detected issue.
- Native compatibility with Openclaw Skills for multi-agent security workflows.
SKILL.md
Loading
Related Openclaw Skills
NVC Communication Assistant
A specialized AI skill that guides users through the Nonviolent Communication framework to resolve conflicts and express needs clearly.
Meme Generator
A specialized AI skill for generating culturally relevant meme captions and discovering trending viral templates.
Cc Switch
A comprehensive reference tool providing instant access to Cc Switch concepts, best practices, and implementation patterns directly within your developer environment.
Sleep Tracker Skill
A lightweight, command-line health and wellness tracker for Openclaw Skills designed to log sleep, build habits, and monitor health trends.
Self-Improving OpenClaw
A structured framework for AI agents to autonomously learn from mistakes, user preferences, and recurring patterns to improve over time.
Web Page API
A specialized skill for AI agents to retrieve raw or rendered HTML and convert web pages into clean Markdown for data analysis and research.
Featured*
