AI Vulnerability Checker (DeepSeek)

DeepSeek Vulnerability Checker is a VS Code extension that uses AI to scan your code for security vulnerabilities. Powered by Hugging Face’s OpenAI router API, it detects and reports issues in multiple programming languages with precise details, severity levels, and recommended fixes.

---

Features

• ✅ Scan your code for security vulnerabilities in real-time.
• 🔍 Highlights exact vulnerable code lines and snippets.
• ⚠️ Provides severity levels: CRITICAL, HIGH, MEDIUM, LOW.
• 💡 Suggests actionable fixes for each issue.
• 📊 Displays results in a sleek, interactive webview inside VS Code.
• 🔒 Stores your Hugging Face API key securely; prompts only if missing or invalid.

---

Installation

1. Download the .vsix file from the releases page.
2. Open VS Code → Extensions view → Click ... → Install from VSIX... → Select the .vsix file.
3. Reload VS Code after installation.

Alternatively, install via terminal:

code --install-extension ai-vulnerability-check-0.0.1.vsix

---

Usage

1. Open any code file in VS Code.

2. Press Ctrl+Shift+P (Windows/Linux) or Cmd+Shift+P (macOS) to open the Command Palette.

3. Type and select Scan Code for Vulnerabilities.

4. If this is the first scan, you will be prompted to enter your Hugging Face API key.

5. Wait for the AI to analyze the code. Results will appear in a side-by-side webview with:

   • Total number of vulnerabilities found
   • Breakdown by severity
   • Vulnerable code snippets
   • Detailed issue description
   • Recommended fix

---

API Key Management

• The extension prompts for a Hugging Face API key the first time you run a scan.
• If the key is invalid or incorrect, you will be prompted again.
• Once valid, the key is stored securely using VS Code's global state; you won't be asked again.
• You can reset the key by running the command Reset Hugging Face API Key (if implemented).

---

Supported Languages

• JavaScript / TypeScript
• Python
• Java
• C / C++
• Go
• And other common languages (depends on model support)

---

Example Output

[VULN-001] | CRITICAL | Line 12
Vulnerable Code:
const password = "12345";
Issue: Hardcoded password detected.
Fix: Use environment variables or secure vault to store secrets.

[VULN-002] | HIGH | Line 45
Vulnerable Code:
eval(userInput);
Issue: Unsanitized user input in eval().
Fix: Avoid using eval() or sanitize input before execution.
...

• The above output will be displayed in a visually rich webview inside VS Code with color-coded severity badges.

---

Contributing

We welcome contributions from developers!

1. Fork the repository
2. Clone locally
3. Run npm install
4. Compile using npm run compile
5. Test your changes
6. Create a pull request

---

License

This project is licensed under the MIT License.

---

Authors

Cyber ESS Team (2023–2027 Batch)

• Team Lead: Buvaneswaran E. B.
• Team Member: K.S Adithyan

---

Acknowledgements

• Hugging Face – AI models and API
• Visual Studio Code – Extension platform
• Inspired by security-first best practices in code analysis

---

Screenshots

Example scan showing critical and high vulnerabilities with recommendations.

`

Disclaimer

• This extension is for educational purposes only.
• It is not intended for commercial use.
• The author is not responsible for any misuse, damages, or errors resulting from the use of this extension.
• Use at your own risk. Please review and test thoroughly before using in production.