Skip to content

Latest commit

 

History

History
45 lines (35 loc) · 1.07 KB

README.md

File metadata and controls

45 lines (35 loc) · 1.07 KB

LLM-powered Vulnerability Risk Agent

A web-based tool that performs security analysis on Nodejs repositories, providing threat modeling and vulnerability assessments with AI-powered risk evaluation.

Security Assessment Dashboard

Features

  • Triage of false-positives
  • Threat modeling
  • Interactive dashboard visualization

Augmented LLM Generation

Augments LLMs with context-specific security metadata and open source intelligence from the GitHub advisories database.

Getting Started

  1. Clone the repository
  2. Add your GitHub and OpenAI API keys
  3. Start the agent server: 
    cd agent
npm install
npm start
  4. Start the frontend server: 
    cd frontend
npm install
npm start
  5. Enter a GitHub repository URL and click "Analyze"

API Endpoints

POST /analyze

Accepts a GitHub repository URL and returns:

  • Threat model (in Markdown format)
  • Vulnerability analysis with:
    • Package information
    • Contextual risk levels
    • Exploitability assessment
    • Required conditions
    • Recommended mitigations