Security AI Agent - Documentation

Overview

Security AI Agent is a comprehensive command-line security testing and analysis framework built on Node.js. Version 2.3.0 provides an integrated suite of tools for security scanning, code analysis, vulnerability assessment, and AI-powered security intelligence.

Features

$3

- File System Browser: Navigate and inspect files directly from the command line
- AI-Powered Analysis: Integrate with multiple AI providers (Anthropic Claude, OpenAI GPT, Google Gemini)
- Security Scanning: Network port scanning, dependency checking, and security audits
- Code Analysis: Automated code review and project analysis
- Traffic Monitoring: Real-time network traffic monitoring and statistics
- CVE Database: Search and analyze Common Vulnerabilities and Exposures
- API Testing: Test and validate API endpoints and collections
- Code Refactoring: Automated code refactoring with AI assistance
- Web Scraping: Extract and analyze web content and security headers
- Vulnerability Assessment: Comprehensive vulnerability scanning and reporting
- Card Validation: Credit card number format validation and BIN analysis
- Cryptocurrency Tools: Real-time crypto price checking and rate comparisons
- Code Conversion: Convert HTML and jQuery to React components

$3

The agent supports three AI providers with seamless switching:

- Anthropic Claude (Default: Claude Sonnet 4.5)
- OpenAI GPT
- Google Gemini (with streaming support)

Installation

``bash
npm install
`

$3

- readline (built-in)
- fs (built-in)
- path (built-in)
- Custom modules in ./modules directory

Configuration

$3

Set API keys via environment variables for automatic configuration:

`bash
export ANTHROPIC_API_KEY="your-anthropic-key"
export OPENAI_API_KEY="your-openai-key"
export GOOGLE_API_KEY="your-google-key"
export AI_PROVIDER="anthropic" # Set default provider
export NO_COLOR=1 # Disable colored output
export DEBUG=1 # Enable verbose debugging
`

$3

Configure AI providers at runtime:

`bash
ai-setup anthropic YOUR_API_KEY
ai-setup openai YOUR_API_KEY
ai-setup google YOUR_API_KEY
`

Command Reference

$3

- help - Display all available commands
- status - Show system and module status
- history - View command history (last 20 commands)
- version - Display version information
- tips - Show tips, shortcuts, and example workflows
- banner - Display the application banner
- clear - Clear the screen
- exit - Exit the application

$3

- ls - List files and directories
- cd - Change directory
- pwd - Show current directory path
- cat - Display file contents
- less - View file with pagination
- find - Search for files matching pattern
- file-info - Show detailed file information
- tree - Display directory tree structure
- bookmark - Manage directory bookmarks
- browse-help - Show file browser help

$3

- ai-setup - Configure AI provider
- ai-provider - Switch between AI providers
- ai-status - Show AI module configuration status
- ai-help - Display detailed AI command documentation

$3

- ai-analyze - Perform AI security analysis on code file
- ai-batch - Batch analyze multiple files
- ai-compare - Compare two code versions
- ai-scan - Quick security scan

$3

- ai-threat - Comprehensive threat assessment
- ai-explain - Explain vulnerability or CWE details

$3

- ai-generate - Generate secure Node.js code

$3

- ai-improve - Get security recommendations for project

$3

- ai-chat - Start interactive AI chat session
- ai-ask - Quick AI question
- ai-clear-history - Clear chat conversation history

$3

- scan-ports - Scan network ports on target host
- network-info - Display network information
- check-deps - Check project dependencies
- security-audit - Run comprehensive security audit

$3

- analyze-code - Analyze code file for issues
- analyze-project - Analyze entire project

$3

- monitor-traffic - Start network traffic monitoring
- stop-monitor - Stop traffic monitoring
- traffic-stats - Show traffic statistics
- export-traffic - Export traffic data to file

$3

- search-cve - Search CVE database
- check-cwe - Check CWE (Common Weakness Enumeration) details
- check-package - Check package for known vulnerabilities
- check-exploits - Search for known exploits
- scan-deps - Scan project dependencies for CVEs
- export-cve - Export CVE report

$3

- test-endpoint - Test API endpoint
- test-collection - Test API collection from file
- export-report - Export test results report

$3

- refactor-file - Refactor JavaScript file
- refactor-project - Refactor entire project
- analyze-refactor - Analyze code for refactoring opportunities
- compare-refactor - Compare refactored versions

$3

- scrape - Scrape webpage content
- scrape-links - Extract all links from webpage
- scrape-images - Extract all images from webpage
- export-scrape - Export scraped data to file
- analyze-headers - Analyze security headers

$3

- vuln-assess - Run vulnerability assessment
- export-vuln - Export vulnerability results

$3

- validate-card - Validate card number format
- validate-batch - Batch validate card numbers
- analyze-bin - Analyze Bank Identification Number
- show-test-cards - Display official test card numbers
- explain-algorithm - Explain validation algorithms (Luhn, etc.)
- card-security-report - Generate card security report
- check-card-status - Check single card payment status
- check-card-batch - Check batch card payment status
- configure-card-checker - Configure card checker settings
- card-checker-help - Show card checker help

$3

- compare-rates - Compare rates across exchanges
- crypto-price - Get cryptocurrency current price
- track-portfolio - Track multiple cryptocurrencies
- crypto-convert - Convert between cryptocurrencies
- market-summary - Show cryptocurrency market summary
- export-rates - Export rates to file
- crypto-help - Show cryptocurrency commands help

$3

- html-to-react - Convert HTML file to React component
- batch-convert - Batch convert HTML files
- analyze-html - Analyze HTML structure
- jquery-to-react - Convert jQuery code to React
- jq-batch-convert - Batch convert jQuery files
- analyze-jquery - Analyze jQuery code structure

Usage Examples

$3

`bash
FEAR >> ls
FEAR >> cd src
FEAR >> pwd
FEAR >> cat config.js
FEAR >> find *.js
`

$3

`bash
FEAR >> ai-setup anthropic sk-ant-xxxxx
FEAR >> ai-analyze vulnerable.js
FEAR >> ai-threat myapp
FEAR >> ai-improve .
`

$3

`bash
FEAR >> security-audit
FEAR >> scan-deps
FEAR >> search-cve CVE-2024-1234
FEAR >> ai-explain CVE-2024-1234
`

$3

`bash
FEAR >> analyze-code old.js
FEAR >> refactor-file old.js
FEAR >> ai-compare old.js old.refactored.js
`

$3

`bash
FEAR >> ai-chat
AI Chat > Explain SQL injection vulnerabilities
AI Chat > /history
AI Chat > /save security-notes.txt
AI Chat > /exit
`

$3

`bash
FEAR >> search-cve authentication
FEAR >> check-package express
FEAR >> ai-threat authentication-bypass
FEAR >> export-cve vulnerability-report.json
`

Command Line Features

$3

- TAB - Command autocomplete
- Up/Down Arrows - Navigate command history
- Ctrl+C - Cancel current operation
- Ctrl+D - Exit application

$3

- Maintains last 100 commands
- View with history command
- Navigate with arrow keys

$3

Press TAB to autocomplete commands. If multiple matches exist, all options will be displayed.

Module Architecture

The agent uses a modular architecture with the following structure:

`
modules/
├── utils/
│ ├── browser.js # File system browser
│ └── colorizer.js # Terminal output formatting
├── security/
│ ├── scanner.js # Network scanning
│ ├── web.js # Web scraping
│ ├── vulnerability.js # Vulnerability assessment
│ ├── monitor.js # Traffic monitoring
│ └── cve.js # CVE database
├── ai/
│ └── ai.js # AI integration
├── code/
│ ├── analyzer.js # Code analysis
│ ├── refactor.js # Code refactoring
│ ├── react.js # HTML to React
│ └── jquery.js # jQuery to React
├── analyze/
│ └── api.js # API testing
├── ccard/
│ ├── validator.js # Card validation
│ └── checker.js # Card status checking
└── crypto/
└── exchange.js # Cryptocurrency tools
`

Best Practices

$3

- Store API keys in environment variables, never in code
- Use ai-status to verify configuration before running analyses
- Export reports regularly for audit trails
- Run security-audit before deploying applications

$3

- Use batch commands for multiple file operations
- Clear AI chat history periodically with ai-clear-history
- Export large datasets to files rather than viewing in terminal

$3

- Bookmark frequently accessed directories
- Use command history for repeated operations
- Configure default AI provider via environment variable
- Create shell aliases for common command sequences

Troubleshooting

$3

If a module shows [UNAVAILABLE] status:

1. Check that all dependencies are installed
2. Verify module file exists in correct path
3. Enable DEBUG mode: DEBUG=1 node agent.js

$3

`bash
FEAR >> ai-status # Check current configuration
FEAR >> ai-setup anthropic YOUR_KEY # Reconfigure
FEAR >> ai-help # View detailed AI documentation
`

$3

`bash
FEAR >> help # View all available commands
FEAR >> browse-help # View file browser commands
FEAR >> ai-help # View AI commands
`

Version Information

Current Version: 2.3.0

Node.js Requirements: Compatible with Node.js 12.x and higher

Platform Support: Cross-platform (Windows, macOS, Linux)

License

This is a security testing framework intended for authorized security assessments and educational purposes only. Always obtain proper authorization before testing systems you do not own.

Support

For issues, questions, or feature requests, consult the following resources:

- Run help for command reference
- Run tips for usage examples and workflows
- Run ai-help` for AI-specific documentation
- Enable DEBUG mode for verbose error output