AI Blocks › Keep your code secure
Live app security tester
Give it a running web app or API you own. Get weaknesses found by safe probing.
Live app security tester is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · MIT licence · Made by Burhan Sebin · Level: expert · Thinking: high
Made by Burhan Sebin. See the original on GitHub; we copied it as it is, with its licence.
What it does
A list of weaknesses found in a running web app or API that you own, found by safe probing from the outside. You get a report with how to fix each one. You set the target and scan rules first. If the app has a login, you supply a valid test account or token. The scan uses tools such as OWASP ZAP, Burp or Nuclei to crawl, then probe the app. Each finding is sorted by type and severity score. The report gives the page, the request and the fix. You can then schedule it nightly against staging. Always scan staging, never production, since probes can change data.
You give it
- The address of your app or API
- Proof that you own it or may test it
- A test login or token (optional)
- What is out of scope (optional)
You get
- Findings by type and severity
- The request that triggered each issue
- Fix advice for each finding
- A report you can share
- A schedule for repeat scans
Use it when
- You are about to launch and want an outside check on your app.
- You own an API and want to find exposed endpoints.
- You want a regular nightly scan against your test site.
- A customer asked for a security test report.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can run code and open a browser.