{"uid":"cap_B7l37scoxnI1eDBiQUNR4","slug":"settled-bounty-task-url-safety-scanner-add0b2cb","name":"Settled Bounty/Task URL Safety Scanner","description":"Scan one bounty / task / repository URL before working on it: fetches it (GitHub issues and repos via the API), runs the honeypot pattern scan (hidden HTML-comment instructions, prompt injection, credential requests, fork/star anomalies, dead or archived repos, reward anomalies) and returns a trust score, a label and every flag with its reason.","url":"https://settled.tools/v1/income/check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"https URL of a bounty issue, repository, or listing page"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"url":"https://github.com/owner/repo/issues/123","repo":{"forks":40,"stars":3},"flags":[{"flag":"hidden_instructions","reason":"HTML comment (invisible to humans) contains instructions aimed at an AI agent or asks for secrets"}],"label":"suspected_honeypot","trust":12}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_API8iMrmP35E9yoFwWhUb","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a bounty, task, or repository URL for honeypot patterns and prompt injection risks, returning a trust score, label, and detailed flags with reasons.","exampleAgentPrompt":"Before I start working on this bounty, can you scan https://github.com/some-org/some-repo/issues/42 for honeypot patterns, prompt injection tricks, or anything suspicious, and give me its trust score?","exampleUseCases":[{"title":"Vetting a GitHub bounty before starting","prompt":"I found a bounty at https://github.com/acme-org/bounty-board/issues/7 that pays $500 — can you check it for honeypots, hidden HTML comment instructions, or any red flags before I spend time on it?"},{"title":"Screening a task for credential harvesting","prompt":"There's a task listing at https://taskmarket.io/tasks/abc123 asking for my wallet details — please scan it and tell me if it looks like a credential-harvesting scam."},{"title":"Checking repo legitimacy for an AI agent workflow","prompt":"My agent is about to work on a repository at https://github.com/mystery-org/ai-challenge — run a safety check on it first and let me know if it's archived, has suspicious fork patterns, or has any reward anomalies."}],"resultDescription":"Returns a structured response containing a numeric trust score (0–1 or similar scale), a human-readable trust label (e.g. 'safe', 'suspicious', 'honeypot'), and a list of flags each with a category and reason — covering honeypot HTML comments, prompt injection attempts, credential requests, fork/star anomalies, dead/archived repo status, and reward anomalies.","failureModes":["Invalid or non-HTTPS URL returns an error","Private or access-restricted GitHub repos may return incomplete data","Rate limiting if many scans are made in rapid succession","Dead links or 404 URLs may return a partial result or error","GitHub API rate limits could affect freshness of data for repo/issue fetches"],"whenToPreferThis":"Use this endpoint when an AI agent or human developer needs to vet a bounty, task, or repository URL for safety before investing effort — especially in adversarial or open internet contexts where prompt injection, honeypots, or credential phishing are risks. Prefer this over manual inspection when automating agent workflows that process untrusted external task listings or GitHub issues.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-02T03:07:42.878Z","isFirstParty":false,"canonicalSlug":"settled-bounty-task-url-safety-scanner-add0b2cb"}