{"uid":"cap_8k4Px7Y2jvHmzLlfdAQ0b","slug":"zip-entry-header-inspector-c66e8798","name":"ZIP Entry Header Inspector","description":"Parse a ZIP's first entry header: name, method, sizes, CRC, encryption, and zip-slip path or executable-name risks.","url":"https://file-formats.x402tookit.com/zip-entry?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["hex"],"properties":{"hex":{"type":"string","description":"First 30 + name length bytes of the ZIP as hex (up to 512 bytes)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"asOf":{"type":["null","string"]},"name":{"type":["null","string"]},"crc32":{"type":["null","string"]},"flags":{"type":["null","number"]},"method":{"type":["null","number"]},"source":{"type":["null","string"]},"reasons":{"type":["array","null"]},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"modified":{"type":["null","string"]},"utf8Name":{"type":["boolean","null"]},"encrypted":{"type":["boolean","null"]},"pathRisks":{"type":["array","null"]},"disclaimer":{"type":["null","string"]},"methodName":{"type":["null","string"]},"nameLength":{"type":["null","number"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"extraLength":{"type":["null","number"]},"nameComplete":{"type":["boolean","null"]},"bytesExamined":{"type":["null","number"]},"versionNeeded":{"type":["null","number"]},"compressedSize":{"type":["null","number"]},"containerGuess":{},"dataDescriptor":{"type":["boolean","null"]},"uncompressedSize":{"type":["null","number"]}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zt7lXOj3ZD82huYoALkvF","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses the first entry header of a ZIP file from hex bytes, extracting name, compression method, sizes, CRC32, encryption status, and detecting zip-slip path or executable-name risks.","exampleAgentPrompt":"Can you inspect the first entry in this ZIP file for me? Here are its first 512 bytes as hex: 504b03040a000000000087b04e5200000000... — check for zip-slip path risks, whether it's encrypted, and what compression method is used.","exampleUseCases":[{"title":"Security scan before ZIP extraction","prompt":"I'm about to unzip a file a user uploaded to our server. Can you check the first entry's header bytes — here's the hex: 504b03040a00000008006f5b4e52b1f9f82032000000280000000c0000007465737466696c652e74787474657374 — and tell me if there are any zip-slip path traversal risks or suspicious executable names I should worry about?"},{"title":"Verify ZIP compression method for compatibility","prompt":"I need to know which compression method the first file in this ZIP uses — is it stored (0), deflated (8), or something else? Here's the raw header in hex: 504b03040a0000000000a2a34e5200000000000000000000000009000000746573742e747874"},{"title":"Check if uploaded ZIP entry is encrypted","prompt":"Someone submitted a ZIP archive and I want to know if the first entry inside is password-protected before I try to process it. Here's the first 300 bytes in hex: 504b0304140001080800 — is it encrypted and what's the file name?"}],"resultDescription":"Returns a structured object including the entry's file name, compression method name and code, compressed and uncompressed sizes, CRC32 checksum, encryption status, general-purpose bit flags, last-modified timestamp, UTF-8 name flag, data descriptor flag, version needed, name and extra field lengths, whether the name is complete, any detected path risks (zip-slip traversal), executable-name risks, an overall verdict and summary, and a list of any checks that could not be performed given the bytes provided.","failureModes":["Insufficient hex bytes provided — header fields can't be fully parsed if fewer than the local file header length + name length are supplied","Invalid or non-hex input causes a parsing error","Hex string doesn't begin with ZIP local file header signature (PK\\x03\\x04), resulting in an error or degraded result","Truncated name field — if hex is too short to include full file name, nameComplete will be false and some risk checks may be skipped","Non-ZIP file bytes submitted — service may return error or degraded flag"],"whenToPreferThis":"Use this endpoint when you need to quickly inspect the first entry of a ZIP archive for security risks (zip-slip, hidden executables, encryption) or metadata (compression method, sizes, CRC32) without fully downloading or extracting the archive. It is ideal for pre-flight security screening of user-uploaded ZIPs, for validating ZIP structure before processing, or for forensic analysis of suspicious archives. Prefer this over generic file-type detectors when you specifically need ZIP entry-level metadata and risk assessment.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T00:35:28.695Z","isFirstParty":false,"canonicalSlug":"zip-entry-header-inspector-c66e8798"}