跳到正文
DEV Community· Victor Kononenko·· 2 小時前AI 評分50

Forge 0.30 新增審計修復提示詞,0.31 加入報告分享連結

Forge can now hand your audit straight to a coding agent — and share the report with a link

AI 導讀

Forge 0.30 新增把未通過的安全檢查及修復建議整理成提示詞交給編碼 Agent,0.31 則加入透過連結分享審計報告的功能。提示詞只列出未通過的檢查及相應修復方法,並以英文生成及附上報告連結。任何人毋須登入即可查看該報告;連結有效 24 小時,期間再次複製可延長同一連結 24 小時。

正文

Victor Kononenko

Forge is a security-audit tool I built for people who ship code with AI agents and don't have a security team. Two releases this week closed the loop between finding a problem and fixing it. Here's what changed.

Audit interface with a

0.30 — Copy an audit's findings as a prompt.

The core audit UI now has a "Copy as prompt" button. It takes every failed check, pairs each finding with its fix, and turns the whole thing into a single ready-made prompt. Paste it into Claude Code, Codex, or any agent that works on your codebase, and it can start fixing the issues directly.

Two things matter here. Checks that already passed are left out, so the prompt is only the work that's actually left. And the prompt is generated in English regardless of what language you read the site in — because that's the language coding agents follow most reliably.

Copied prompt pasted into the Cody/Claude Code terminal

0.31 — Share an audit report with a link.

You can now open an audit and press "Copy link" to get a URL anyone can open without signing in. They see that one report and nothing else of yours. The link lives for 24 hours — and copying it again within that window extends the same link another 24 hours.

The bigger win: "Copy as prompt" now includes that link too. So when you hand the prompt to an agent, the agent can also read the full report behind it, not just the compressed list of fixes.

A link-sharing dialogue — for example, a report opened via a link by another person, or an agent reading a report via a link

Why this matters for VibeCoders.

The old flow for a solo dev or VibeCoder was: find a scanner, get raw output you can't read, figure out what's real, fix it by hand. Forge now collapses that into: run an audit, copy the prompt, let your agent fix it, and share the report link with someone who needs to see it. No codebase access required — Forge works as a black box and simulates a real attacker, so you never hand the tool your source.

Both features are live now and free while Forge is in beta. Would love feedback from anyone shipping fast without a security team.

來源:DEV Community · dev.to