Safety & Security · Software component
Static Security Scanner
Software componentSafety & SecuritySafety, Security & Governancearc:StaticSecurityScanner
A source-code security scanner that detects insecure patterns such as hardcoded secrets, injection-prone queries, unsafe deserialisation and unsanitised user input interpolated into prompt templates.
Responsibility. Flags insecure code patterns in agent application code before build.
Also known as: SAST scan, Prompt-template injection scan, Code filtering layer, Generated-code sanitizer, SAST
Relationships
is invoked by dependency
triggers dynamic
guards control
audits assurance
Design guidance
- MUST add agent-specific rules that detect user input interpolated into prompts without sanitisation and flag them for review or explicit security annotation.
- SHOULD be used as a fast but brittle first filter; it complements rather than replaces structural isolation.
- SHOULD run both as a pre-commit hook and in CI, failing on high and critical findings.
Classification
- Patterns
- Custom rules for unsafe prompt construction
- Technologies
- BanditNVIDIA NeMo GuardrailsSonarQubeCodeQLpre-commit
- Quality attributes
- Security (ISO/IEC 25010 | NIST AI RMF: secure and resilient)
- Risks mitigated
- Prompt injection via direct interpolation of user inputCredential leaksRemote code execution via unsafe deserialisation
Sources
- Ch4.2: T. Nguyen, "Deployment and Scaling," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 4.2. ISBN: 9798244538229.
- Ch9.3: T. Nguyen, "Sandboxing and Transparency Foundations," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.3. ISBN: 9798244538229.
- Ref9.09: "Compliance Automation and Tools," unpublished reference note (09-Compliance-Automation-Tools.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note
- Ref9.10: "Chapter 9 Summary: Safety, Ethics, and Compliance," unpublished reference note (10-Chapter-9-Summary.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note