Most AI security tools lock you into one agent. We didn't.

Описание и применение

SecFoo позволяет проводить проверки безопасности с помощью любых AI‑агентов, нормализуя вывод и обеспечивая сопоставимость результатов.

Задача

Security reviews with AI coding agents produce inconsistent outputs across agents, making comparison and tracking difficult.

Результат

SecFoo enables consistent, agent-agnostic security reviews by normalizing output contracts and handling diverse agent integrations through adapters.

Рабочий процесс

• Resolve the target (local path or shallow GitHub clone)
• Detect the stack (languages and frameworks)
• Render the prompt (safety preamble, skill instructions, output contract)
• Run the agent via an adapter (CLI or API) with timeout and process-tree kill
• Capture report, prompt, logs, and token/cost figures
• Parse findings using the fixed contract and compute CVSS scores

Доказательства

Most agentic security tools deal with this by picking one agent and building around it.

Источник

SecFoo handles this with an adapter layer.

Источник

Every skill has a fixed output contract: a required "Overall risk rating:" line, and "### [SEVERITY] ID: title" headings for every finding.

Источник