{"uid":"cap_AoSJh-c7vYZlLP84tDaPb","slug":"signaldesk-ai-osv-vulnerability-lookup-15db4669","name":"SignalDesk AI OSV Vulnerability Lookup","description":"Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.","url":"https://x402-agent.kariguetoazul.workers.dev/api/osv?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["package"],"properties":{"package":{"type":"string","description":"Package name, e.g. lodash"},"version":{"type":"string","description":"Version to check, e.g. 4.17.15"},"ecosystem":{"enum":["npm","PyPI"],"type":"string","description":"Package ecosystem"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"pacote":"lodash","versao":"4.17.15","vulneravel":true,"total_vulnerabilidades":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.004","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.004/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_WBd7x_e3ucrQYAlxVcGgZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.004","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a given npm or PyPI package (and optional version) has known vulnerabilities using the OSV database","exampleAgentPrompt":"Can you check if lodash version 4.17.15 on npm has any known vulnerabilities in the OSV database?","exampleUseCases":[{"title":"CI pipeline dependency security check","prompt":"Before I deploy, can you check if the npm package express version 4.18.2 has any known vulnerabilities I should worry about?"},{"title":"Python library audit for data project","prompt":"I'm about to install requests 2.28.0 from PyPI — does it have any known security vulnerabilities in OSV?"},{"title":"General package safety review","prompt":"Is lodash on npm currently flagged as vulnerable at all, even without a specific version? I want to know if it's safe to use in my project."}],"resultDescription":"Returns a JSON object containing the package name, the version checked, a boolean indicating whether it is vulnerable, and the total number of known vulnerabilities found in the OSV database for that package/version combination.","failureModes":["Missing required 'package' query parameter returns an error","Invalid or unrecognized ecosystem value (not 'npm' or 'PyPI') may return an error or empty result","Package not found in OSV database may return zero vulnerabilities rather than an error","Payment failure (insufficient USDC balance) blocks the request","Rate limiting or quota exhaustion under free tier may reject the call"],"whenToPreferThis":"Use this endpoint when you need a quick, paid, per-call vulnerability lookup against the OSV database for a specific npm or PyPI package, especially when integrating security checks into automated agent workflows. It is best suited for single-package lookups in supported ecosystems (npm, PyPI) rather than bulk scanning or ecosystems like Maven or RubyGems.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:42:11.739Z","isFirstParty":false,"canonicalSlug":"signaldesk-ai-osv-vulnerability-lookup-15db4669"}