Skip to content

Add AgentAudit safe badge#49

Open
starbuck100 wants to merge 1 commit intorefreshdotdev:mainfrom
starbuck100:agentaudit/safe-badge
Open

Add AgentAudit safe badge#49
starbuck100 wants to merge 1 commit intorefreshdotdev:mainfrom
starbuck100:agentaudit/safe-badge

Conversation

@starbuck100
Copy link

@starbuck100 starbuck100 commented Feb 13, 2026

AgentAudit Security Audit Result

Result: Safe (risk score: 4/100)

Findings (2 low-severity)

  1. Browser sandbox and web security disableddisable_security=True + --no-sandbox in Chromium launch. Standard for browser-use agents, marked as by-design.
  2. Hardcoded Flask SECRET_KEY'secret!' on localhost-only dashboard server (127.0.0.1:5009). Minimal risk.

Recommendation

Consider generating Flask SECRET_KEY dynamically via os.urandom(24).

Full report: https://agentaudit.dev/skills/web-eval-agent
Report ID: 411 | Commit: 4e1ad6e


EntelligenceAI PR Summary

Added AgentAudit security badge to README for visual indication of project safety status.

  • Added 'Safe' status badge with green color scheme at top of README.md
  • Badge links to package's AgentAudit page at agentaudit.dev
  • Positioned above existing project sunset notice
  • Documentation-only change with no code modifications

Security audit completed by AgentAudit.
Report: https://www.agentaudit.dev/package/web-eval-agent
Risk score: 4/100 (safe)
Findings: 2 low-severity (browser sandbox disabled by design, hardcoded Flask dev secret)
@entelligence-ai-pr-reviews
Copy link

Walkthrough

This pull request adds a security audit badge to the project's README documentation. The badge displays an 'AgentAudit' safety status indicator with a 'Safe' designation and green color scheme, linking to the package's audit page at agentaudit.dev. This is a documentation-only change that provides visual confirmation of the project's security audit status. The badge has been positioned at the top of the README, above the existing project sunset notice, making it immediately visible to users and contributors visiting the repository.

Changes

File(s) Summary
README.md Added an AgentAudit safety badge at the top of the file displaying 'Safe' status with green color scheme and linking to agentaudit.dev. Badge positioned above the existing project sunset notice.

🔗 Cross-Repository Impact Analysis

Enable automatic detection of breaking changes across your dependent repositories. → Set up now

Learn more about Cross-Repository Analysis

What It Does

  • Automatically identifies repositories that depend on this code
  • Analyzes potential breaking changes across your entire codebase
  • Provides risk assessment before merging to prevent cross-repo issues

How to Enable

  1. Visit Settings → Code Management
  2. Configure repository dependencies
  3. Future PRs will automatically include cross-repo impact analysis!

Benefits

  • 🛡️ Prevent breaking changes across repositories
  • 🔍 Catch integration issues before they reach production
  • 📊 Better visibility into your multi-repo architecture

▶️AI Code Reviews for VS Code, Cursor, Windsurf
Install the extension

Note for Windsurf Please change the default marketplace provider to the following in the windsurf settings:

Marketplace Extension Gallery Service URL: https://marketplace.visualstudio.com/_apis/public/gallery

Marketplace Gallery Item URL: https://marketplace.visualstudio.com/items

Entelligence.ai can learn from your feedback. Simply add 👍 / 👎 emojis to teach it your preferences. More shortcuts below

Emoji Descriptions:

  • ⚠️ Potential Issue - May require further investigation.
  • 🔒 Security Vulnerability - Fix to ensure system safety.
  • 💻 Code Improvement - Suggestions to enhance code quality.
  • 🔨 Refactor Suggestion - Recommendations for restructuring code.
  • ℹ️ Others - General comments and information.

Interact with the Bot:

  • Send a message or request using the format:
    @entelligenceai + *your message*
Example: @entelligenceai Can you suggest improvements for this code?
  • Help the Bot learn by providing feedback on its responses.
    @entelligenceai + *feedback*
Example: @entelligenceai Do not comment on `save_auth` function !

Also you can trigger various commands with the bot by doing
@entelligenceai command

The current supported commands are

  1. config - shows the current config
  2. retrigger_review - retriggers the review

More commands to be added soon.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant