# Send Hefestoai Auditor to your agent
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
## Fast path
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
## Suggested prompts
### New install

```text
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
```
### Upgrade existing

```text
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
```
## Machine-readable fields
```json
{
  "schemaVersion": "1.0",
  "item": {
    "slug": "hefestoai-auditor",
    "name": "Hefestoai Auditor",
    "source": "tencent",
    "type": "skill",
    "category": "开发工具",
    "sourceUrl": "https://clawhub.ai/artvepa80/hefestoai-auditor",
    "canonicalUrl": "https://clawhub.ai/artvepa80/hefestoai-auditor",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadUrl": "/downloads/hefestoai-auditor",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=hefestoai-auditor",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "packageFormat": "ZIP package",
    "primaryDoc": "SKILL.md",
    "includedAssets": [
      "SKILL.md"
    ],
    "downloadMode": "redirect",
    "sourceHealth": {
      "source": "tencent",
      "status": "healthy",
      "reason": "direct_download_ok",
      "recommendedAction": "download",
      "checkedAt": "2026-04-30T16:55:25.780Z",
      "expiresAt": "2026-05-07T16:55:25.780Z",
      "httpStatus": 200,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=network",
      "contentType": "application/zip",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=network",
        "contentDisposition": "attachment; filename=\"network-1.0.0.zip\"",
        "redirectLocation": null,
        "bodySnippet": null
      },
      "scope": "source",
      "summary": "Source download looks usable.",
      "detail": "Yavira can redirect you to the upstream package for this source.",
      "primaryActionLabel": "Download for OpenClaw",
      "primaryActionHref": "/downloads/hefestoai-auditor"
    },
    "validation": {
      "installChecklist": [
        "Use the Yavira download entry.",
        "Review SKILL.md after the package is downloaded.",
        "Confirm the extracted package contains the expected setup assets."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    }
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/hefestoai-auditor",
    "downloadUrl": "https://openagent3.xyz/downloads/hefestoai-auditor",
    "agentUrl": "https://openagent3.xyz/skills/hefestoai-auditor/agent",
    "manifestUrl": "https://openagent3.xyz/skills/hefestoai-auditor/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/hefestoai-auditor/agent.md"
  }
}
```
## Documentation

### HefestoAI Auditor

Static code analysis for security, quality, and complexity. Supports 17 languages.

Privacy: All analysis runs locally. No code is transmitted to external services. No network calls are made during analysis.

Permissions: This tool reads source files in the specified directory (read-only). It does not modify your code.

### Install

pip install hefesto-ai

### Quick Start

hefesto analyze /path/to/project --severity HIGH

### Severity Levels

hefesto analyze /path/to/project --severity CRITICAL   # Critical only
hefesto analyze /path/to/project --severity HIGH        # High + Critical
hefesto analyze /path/to/project --severity MEDIUM      # Medium + High + Critical
hefesto analyze /path/to/project --severity LOW         # Everything

### Output Formats

hefesto analyze /path/to/project --output text                          # Terminal (default)
hefesto analyze /path/to/project --output json                          # Structured JSON
hefesto analyze /path/to/project --output html --save-html report.html  # HTML report
hefesto analyze /path/to/project --quiet                                # Summary only

### Status and Version

hefesto status
hefesto --version

### Security Vulnerabilities

SQL injection and command injection
Hardcoded secrets (API keys, passwords, tokens)
Insecure configurations (Dockerfiles, Terraform, YAML)
Path traversal and XSS risks

### Semantic Drift (AI Code Integrity)

Logic alterations that preserve syntax but change intent
Architectural degradation from AI-generated code
Hidden duplicates and inconsistencies in monorepos

### Code Quality

Cyclomatic complexity >10 (HIGH) or >20 (CRITICAL)
Deep nesting (>4 levels)
Long functions (>50 lines)
Code smells and anti-patterns

### DevOps Issues

Dockerfile: missing USER, no HEALTHCHECK, running as root
Shell: missing set -euo pipefail, unquoted variables
Terraform: missing tags, hardcoded values

### What It Does NOT Detect

Runtime network attacks (DDoS, port scanning)
Active intrusions (rootkits, privilege escalation)
Network traffic monitoring
For these, use SIEM/IDS/IPS or GCP Security Command Center

### Supported Languages (17)

Code: Python, TypeScript, JavaScript, Java, Go, Rust, C#

DevOps/Config: Dockerfile, Jenkins/Groovy, JSON, Makefile, PowerShell, Shell, SQL, Terraform, TOML, YAML

### Interpreting Results

file.py:42:10
  Issue: Hardcoded database password detected
  Function: connect_db
  Type: HARDCODED_SECRET
  Severity: CRITICAL
  Suggestion: Move credentials to environment variables or a secrets manager

### Issue Types

TypeSeverityActionVERY_HIGH_COMPLEXITYCRITICALFix immediatelyHIGH_COMPLEXITYHIGHFix in current sprintDEEP_NESTINGHIGHRefactor nesting levelsSQL_INJECTION_RISKHIGHParameterize queriesHARDCODED_SECRETCRITICALRemove and rotateLONG_FUNCTIONMEDIUMSplit function

### CI/CD Integration

# Fail build on HIGH or CRITICAL issues
hefesto analyze /path/to/project --fail-on HIGH

# Pre-push git hook
hefesto install-hook

# Limit output
hefesto analyze /path/to/project --max-issues 10

# Exclude specific issue types
hefesto analyze /path/to/project --exclude-types VERY_HIGH_COMPLEXITY,LONG_FUNCTION

### Licensing

TierPriceKey FeaturesFREE$0/moStatic analysis, 17 languages, pre-push hooksPRO$8/moML semantic analysis, REST API, BigQuery integration, custom rulesOMEGA$19/moIRIS monitoring, auto-correlation, real-time alerts, team dashboard

All paid tiers include a 14-day free trial.

See pricing and subscribe at hefestoai.narapallc.com.

To activate a license, see the setup guide at hefestoai.narapallc.com/setup.

### About

Created by Narapa LLC (Miami, FL) — Arturo Velasquez (@artvepa)

GitHub: github.com/artvepa80/Agents-Hefesto
Support: support@narapallc.com
## Trust
- Source: tencent
- Verification: Indexed source record
- Publisher: artvepa80
- Version: 2.2.0
## Source health
- Status: healthy
- Source download looks usable.
- Yavira can redirect you to the upstream package for this source.
- Health scope: source
- Reason: direct_download_ok
- Checked at: 2026-04-30T16:55:25.780Z
- Expires at: 2026-05-07T16:55:25.780Z
- Recommended action: Download for OpenClaw
## Links
- [Detail page](https://openagent3.xyz/skills/hefestoai-auditor)
- [Send to Agent page](https://openagent3.xyz/skills/hefestoai-auditor/agent)
- [JSON manifest](https://openagent3.xyz/skills/hefestoai-auditor/agent.json)
- [Markdown brief](https://openagent3.xyz/skills/hefestoai-auditor/agent.md)
- [Download page](https://openagent3.xyz/downloads/hefestoai-auditor)