moyan-security-audit 1.0.0

Agent-native security audit SDK for Python

moyan-security-audit

Agent-native security audit SDK for Python — send source code to the Moyan audit engine and receive structured vulnerability reports with PMI trust scoring.

Installation

pip install moyan-security-audit

Requires Python >= 3.9.

Prerequisites

Set your API key via one of:

1. Environment variable:

   export MOYAN_API_KEY="your-api-key"
   

2. Config file ~/.moyan/config.json:

   { "apiKey": "your-api-key" }
   

If neither is set, the SDK raises RuntimeError with a descriptive message.

Usage

from moyan_audit import audit, AuditOptions

options = AuditOptions(
    code="SELECT * FROM users WHERE id = " + user_id,
    language="sql",
    audit_level="L2",
    timeout=30,
    retries=2,
)

result = audit(options)

print(f"Audit ID: {result.audit_id}")
print(f"PMI Score: {result.pmi_score}")
print(f"Severity: {result.severity}")
print(f"Violations: {len(result.violations)}")
for v in result.violations:
    print(f"  [{v.rule_id}] {v.severity.upper()} — line {v.line}: {v.message}")
print(f"Recommendation: {result.recommendation}")

API Reference

audit(options: AuditOptions) -> AuditResult

Parameter	Type	Required	Default	Description
code	str	Yes	—	Source code to audit
language	AuditLanguage	Yes	—	sql / python / javascript / typescript / java / go / rust / solidity
audit_level	AuditLevel	No	'L1'	L1 (quick scan), L2 (deep), L3 (full)
timeout	int	No	30	Request timeout in seconds
retries	int	No	2	Retry count with exponential backoff (1s, 2s, 4s, ...)

AuditResult

Field	Type	Description
audit_id	str	Unique identifier for this audit run
pmi_score	float	PMI trust score (0-100)
severity	Literal['pass', 'warn', 'fail']	Overall verdict
violations	list[AuditViolation]	Detected rule violations
recommendation	str	High-level remediation guidance

AuditViolation

Field	Type	Description
rule_id	str	Rule identifier (e.g. SQLI-001)
severity	Literal['critical', 'high', 'medium', 'low', 'info']	Violation severity
message	str	Human-readable description
line	int	Source line number (1-based)
snippet	str	Violating code snippet
fix	str	Suggested remediation

API Endpoint

POST https://sixu-ai.net.cn/api/v1/audit
Authorization: Bearer <MOYAN_API_KEY>
Content-Type: application/json

{ "code": "...", "language": "sql", "audit_level": "L2" }

License

MIT