Deepsec
Give the Sazabi agent the Deepsec CLI (deepsec) in its sandbox to run agent-powered vulnerability scans.
About
This CLI connection makes the Deepsec CLI (deepsec), an agent-powered vulnerability scanner, available in the Sazabi agent's sandbox. The tool is baked into the sandbox image; it needs no credentials, though you can supply AI provider keys to configure the underlying model.
Prerequisites
- A Sazabi project.
- No required credentials. Deepsec can run without explicit credentials, though you may optionally provide AI provider keys to control which model it uses.
Set up in the dashboard
Configure the sandbox in the dashboard under Settings > Sandbox CLIs.
Find Deepsec in the catalog
In Settings > Sandbox CLIs, find Deepsec under Browse sandbox CLIs and choose to connect it.
Provide credentials
No credentials are required. Optionally, provide one or more of the following to configure AI provider access: AI_GATEWAY_API_KEY — an AI gateway key; ANTHROPIC_AUTH_TOKEN — an Anthropic API key; OPENAI_API_KEY — an OpenAI API key; ANTHROPIC_BASE_URL — a custom Anthropic base URL; OPENAI_BASE_URL — a custom OpenAI base URL. Save to store them securely; Sazabi injects them into the sandbox when the agent runs.
Set up with the CLI
You can also configure the Deepsec CLI connection with the Sazabi CLI (installed and authenticated — see CLI reference).
Deepsec needs no required credentials, but the CLI currently requires at least one --env flag — so from the CLI, enable it while passing an AI provider key to choose the model:
sazabi sandbox-clis set --type deepsec --env ANTHROPIC_AUTH_TOKEN=<your-anthropic-key>To enable Deepsec with no environment variables at all, use the dashboard path above. To validate the configuration without saving, run the same command with test in place of set.
Verify
Ask the agent, in a thread, to run the deepsec CLI and confirm it returns output. If the command is not found, the CLI connection may not be enabled.
Troubleshooting
Command not found — Confirm the Deepsec CLI connection is enabled for the project under Settings > Sandbox CLIs.
Model calls fail — If you supplied AI provider keys, recheck them; a rotated or revoked key must be re-entered under Settings > Sandbox CLIs or with sazabi sandbox-clis set --type deepsec.