Use case
Software engineers
I want my code scanner to use this context to find vulnerabilities
Use Oi in code when your security scanner, CI checks, or internal tooling needs a shared security-review context for identifying vulnerabilities and returning consistent findings.
Software engineers
I want my code scanner to use this context to find vulnerabilities
Use Oi in code when your security scanner, CI checks, or internal tooling needs a shared security-review context for identifying vulnerabilities and returning consistent findings.
Private instructions
- •Our code scanner reviews a TypeScript web application with authenticated APIs, role-based access, third-party integrations, and production deployments in AWS.
- •It should understand our real app architecture, trust boundaries, and the kinds of code patterns that are normal in our system so the review stays grounded instead of generic.
Private instructions
- •Classify findings as critical, high, medium, low, false positive, or needs review.
- •Evaluate the code against our auth rules, secure coding standards, data access expectations, and infrastructure assumptions.
- •Return structured scanner-friendly output with a vulnerability summary, severity, evidence, remediation guidance, and follow-up checks.
Prompt to use
use oi software-engineer+security-reviewer review this codebase for security vulnerabilities and return structured findings that my scanner can ingestconst API_URL = 'https://api.oioioi.ai/v1';
export async function reviewApiSecurity() {
const softwareEngineerContextId = 'software-engineer';
const securityReviewerContextId = 'security-reviewer';
const [softwareEngineerResponse, securityReviewerResponse] = await Promise.all([
fetch(`${API_URL}/agent-contexts/${softwareEngineerContextId}`, {
headers: { Authorization: `Bearer API_KEY_ABC` },
}),
fetch(`${API_URL}/agent-contexts/${securityReviewerContextId}`, {
headers: { Authorization: `Bearer API_KEY_ABC` },
}),
]);
const [{ context: softwareEngineerContext }, { context: securityReviewerContext }] =
await Promise.all([
softwareEngineerResponse.json(),
securityReviewerResponse.json(),
]);
const result = await evaluateCode({
contexts: [softwareEngineerContext, securityReviewerContext],
task: "Evaluate this API for vulnerabilities.",
});
const vulnerabilities = extractJsonFromResponse(result);
if (vulnerabilities.critical?.length > 0) {
throw new Error('Critical vulnerabilities found');
}
return vulnerabilities;
}More use cases
Browse other landing pages for adjacent ways teams and individuals are using Oi.
Ready to try it
Start with the workflow that matches how your team already works, then move into deeper integrations when you need them.