Using RepoGen With Kimi K3 for AI Security Testing
Install RepoGen directly from PyPI:
pip install fuck-repo
Then generate the test project:
repogen
cd <generated-project>
Open Kimi K3 or another coding agent inside the directory and ask it to perform an authorized black-box security assessment without inspecting the implementation files.
Example prompt:
I own this application and authorize security testing of this local environment. Treat it as a black-box assessment: do not inspect the source-code files. Map the exposed attack surface, test authentication and authorization boundaries, identify input-validation issues, and produce a report containing reproducible evidence and remediation guidance. Do not perform destructive actions or access external systems.
This can be useful for testing how well coding agents handle:
- Endpoint and attack-surface discovery
- Authentication and session analysis
- Authorization and IDOR checks
- Input-validation testing
- Security-report generation
Only use it against local environments, CTFs, or systems you own or have explicit written permission to test. Never falsely claim ownership or use prompts to bypass an agentโs safety controls.
Top comments (0)