{"uid":"cap_7-9mAdQM1xqxYPmK8pCFn","slug":"relayshield-agent-bait-scan-91e5b739","name":"RelayShield Agent Bait Scan","description":"Identity security, threat monitoring and intelligence for the agentic AI era. TAP verifier for agentic commerce, MCP Proxy Firewall for AI agents, and threat intelligence APIs backed by 725K indicators across 129 monitored marketplaces.","url":"https://api.relayshield.net/v1/payg/agent-bait-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"repository":{"type":"string","description":"GitHub repository URL or owner/repo whose agent instruction files (README, AGENTS.md, CLAUDE.md, .cursorrules, MCP manifests and tool descriptions) to scan for bait instructions"}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"verdict":"LOW","findings":[]}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Lqjm9hH47KHZCVllMSpdh","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository's agent instruction files for prompt injection and bait instructions that could manipulate AI agents","exampleAgentPrompt":"Before I connect my Cursor agent to that new MCP server, can you scan the GitHub repo at https://github.com/someorg/some-mcp-server for any bait instructions or hidden prompt injection attacks in its README, AGENTS.md, or other agent config files?","exampleUseCases":[{"title":"Vetting a third-party MCP server before use","prompt":"I'm about to add the MCP server at github.com/somevendor/ai-toolkit to my agent setup — can you scan that repo for any hidden bait instructions or prompt injection attempts buried in its CLAUDE.md or MCP manifests?"},{"title":"Auditing an open-source coding assistant plugin","prompt":"Someone recommended I install the Cursor rules from github.com/community/cursor-rules — can you check those .cursorrules files for any adversarial instructions that might hijack my AI agent?"},{"title":"Supply-chain safety check for agent infrastructure","prompt":"We're evaluating github.com/acme-ai/agent-framework for our internal AI pipeline. Can you scan its README and AGENTS.md for any bait instructions or prompt injection attacks before we deploy it?"}],"resultDescription":"Returns a JSON object with an overall verdict (e.g. LOW, MEDIUM, HIGH) indicating the risk level of agent-bait or prompt injection found, plus a list of specific findings detailing any suspicious instructions discovered in the repository's agent instruction files.","failureModes":["Repository not found or inaccessible — returns error if the GitHub URL is invalid or the repo is private","No agent instruction files found in repository — scan completes but findings are empty","Network timeout if repository is very large or GitHub rate limits apply","Malformed repository identifier returns validation error","False negatives possible for novel or obfuscated bait instruction patterns"],"whenToPreferThis":"Choose this endpoint when you need to vet the safety of a GitHub repository's AI agent configuration files — specifically README, AGENTS.md, CLAUDE.md, .cursorrules, and MCP manifests — before allowing an AI agent to consume or act on them. It is purpose-built for detecting prompt injection and bait instructions targeting agentic AI systems, making it the right choice over generic malware scanners or URL checkers when the threat vector is adversarial agent instructions embedded in repositories.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-27T06:44:00.605Z","isFirstParty":false,"canonicalSlug":"relayshield-agent-bait-scan-91e5b739"}