{"slug": "forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-a", "title": "Forge can now hand your audit straight to a coding agent — and share the report with a link", "summary": "A developer built Forge, a black-box security-audit tool for people shipping code with AI agents who lack a security team, and shipped two features this week. The audit UI now has a \"Copy as prompt\" button that converts every failed check plus its fix into a single English-language prompt for coding agents like Claude Code or Codex, and a \"Copy link\" option that generates a 24-hour, sign-in-free shareable report URL that is also embedded in the prompt. Both features are live and free while Forge is in beta.", "body_md": "Forge is a security-audit tool I built for people who ship code with AI agents and don't have a security team. Two releases this week closed the loop between finding a problem and fixing it. Here's what changed.\n\nThe core audit UI now has a \"Copy as prompt\" button. It takes every failed check, pairs each finding with its fix, and turns the whole thing into a single ready-made prompt. Paste it into Claude Code, Codex, or any agent that works on your codebase, and it can start fixing the issues directly.\n\nTwo things matter here. Checks that already passed are left out, so the prompt is only the work that's actually left. And the prompt is generated in English regardless of what language you read the site in — because that's the language coding agents follow most reliably.\n\nYou can now open an audit and press \"Copy link\" to get a URL anyone can open without signing in. They see that one report and nothing else of yours. The link lives for 24 hours — and copying it again within that window extends the same link another 24 hours.\n\nThe bigger win: \"Copy as prompt\" now includes that link too. So when you hand the prompt to an agent, the agent can also read the full report behind it, not just the compressed list of fixes.\n\nWhy this matters for VibeCoders.\n\nThe old flow for a solo dev or VibeCoder was: find a scanner, get raw output you can't read, figure out what's real, fix it by hand. Forge now collapses that into: run an audit, copy the prompt, let your agent fix it, and share the report link with someone who needs to see it. No codebase access required — Forge works as a black box and simulates a real attacker, so you never hand the tool your source.\n\nBoth features are live now and free while Forge is in beta. Would love feedback from anyone shipping fast without a security team.", "url": "https://wpnews.pro/news/forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-a", "canonical_source": "https://dev.to/viiko/forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-with-a-link-124d", "published_at": "2026-10-20 12:05:40+00:00", "updated_at": "2026-10-20 12:18:46.549282+00:00", "lang": "en", "topics": ["ai-agents", "ai-tools", "developer-tools", "ai-safety"], "entities": ["Forge", "Claude Code", "Codex"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-a", "markdown": "https://wpnews.pro/news/forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-a.md", "text": "https://wpnews.pro/news/forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-a.txt", "jsonld": "https://wpnews.pro/news/forge-can-now-hand-your-audit-straight-to-a-coding-agent-and-share-the-report-a.jsonld"}}