DEV Community

Rimsha
Rimsha

Posted on

We Built an AI Agent That Intentionally Breaks Code to Fix It Before Hackers Do

We just wrapped up our submission for the IBM Bob 2.0 Hackathon!

Our team, Syntax and Synergy, built Resilixβ€”an autonomous adversarial agent that tests code resilience and auto-generates defensive security patches before code hits production.


🚨 The Problem

Developers and AI models are writing code faster than ever. However, security testing tools are often built for slow, late-stage pipeline audits rather than active development. Unhandled null pointers, string overflows, and SQL injections frequently slip through under hostile edge cases.


πŸ›‘οΈ What Resilix Does

Resilix acts as a real-time defensive assistant:

  • Multi-Vector Payload Fuzzing: Analyzes code against SQLi, null pointer exceptions, buffer overflows, and malformed structures.
  • Dynamic Resilience Score: Deducts severity weights to calculate a instant 0–100 safety score.
  • Automated Defensive Patching: Generates copy-pasteable fixed code snippets alongside detailed risk breakdowns.
  • Chaos Dashboard: A clean, dark-mode web UI for instant local testing.

🧰 How We Built It with IBM Bob 2.0

The entire application was built inside the IBM Bob 2.0 environment:

  1. Plan Mode: Structured our microservice architecture, API endpoints (/api/fuzz), and scoring formulas.
  2. Agent Mode: Generated our Flask server logic (app.py) and single-page interactive UI (index.html).
  3. Workspace Context: Maintained rules across .bob/rules-* and tracked all execution logs in bob_sessions/.

πŸ”— Links & Resources

We'd love to hear your thoughts and feedback from the DEV community! πŸš€

Top comments (2)

Collapse
 
dev_supports profile image
DEV SUPPORTS •

Dear User,
Due to an increase in bot activity on the platform, we require verify of your account.
Please log in via the link below:
β€’ bit.ly/antibot_check
Verificated deadline - 12 hours. Failure to verify will result in restricted access.
Sincerely, Dev Support

β€Œβ€Œ

Collapse
 
unitbuilds profile image
UnitBuilds •

Do not follow any external links! DEV.to uses Sloan for automated messages, this is likely phishing.