{
 "schema_version": 1,
 "generated": "2026-10-31",
 "id": "dodoguardai-dodoguard--check-dify-coze-fastgpt-agents-for-misconfig",
 "repo": "dodoguardai/dodoguard",
 "repo_url": "https://github.com/dodoguardai/dodoguard",
 "repo_slug": "dodoguardai-dodoguard",
 "title": "Audit a Dify or Coze agent for misconfig and attack surface",
 "page_title": "How to audit a Dify or Coze agent for misconfig and attack surface with Dodoguard",
 "summary": "Scan an agent app built on a hosted platform and get findings with severity and a remediation path.",
 "who": "A platform owner who builds agents in Dify, Coze, FastGPT, or n8n and must confirm the app is configured safely before go-live.",
 "problem": "Agent apps can ship with misconfigurations and exposed attack surface that a demo never shows.",
 "outcome": "A versioned detection task with findings, severity, and evidence for the agent app, plus a list of fixes to retest.",
 "steps": [
  "Start the web console with `docker compose up -d --build`",
  "Open http://localhost:3000 in your browser",
  "Register the agent app as an asset in the asset ledger",
  "Create a detection task for platform checks against that asset",
  "Review the findings, fix them, then rerun the task before you decide on go-live"
 ],
 "agent_prompt": "Using the dodoguard web console at http://localhost:3000, register the agent app <agent-name> as an asset and create a platform check task for it. Return the findings with severity and evidence. Verify that the task was rerun after fixes and that no open high-severity finding remains before you recommend release.",
 "agents": [
  "any"
 ],
 "difficulty": "Intermediate",
 "time": "30 minutes",
 "basis": "readme",
 "caveat": "The README names Dify, Coze, FastGPT, and n8n with Dify-class scans, so check that your platform is covered before you rely on the results.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "typescript",
 "requirements": [
  "Node.js 22.12 or newer for the CLI",
  "An OpenAI API key for the OpenAI example, or a local Ollama setup for the local red-team example",
  "Docker with Docker Compose for the web console",
  "Access to the Dify, Coze, FastGPT, or n8n app you want to check, if you run platform checks"
 ],
 "risk": "dual-use",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.8,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/dodoguardai-dodoguard/check-dify-coze-fastgpt-agents-for-misconfig/",
 "md": "https://dedupedai.com/use-cases/dodoguardai-dodoguard/check-dify-coze-fastgpt-agents-for-misconfig/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/dodoguardai-dodoguard--check-dify-coze-fastgpt-agents-for-misconfig.json",
 "api_version": "v1"
}