{"uid":"cap_LGrZVHxdKGgWIsB1_UKEL","slug":"pkgguard-by-agentgate-d344a7fa","name":"PkgGuard by AgentGate","description":"Package vulnerability lookup API. Is this package version safe to install? Known vulnerabilities (CVE/GHSA ids, severity, CVSS score, fixed-in versions) and malicious-package flags for one npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven or NuGet package version, from OSV.dev. Search intents: package vulnerability check, is this npm package safe, cve lookup api, pypi vulnerability, malicious package check, osv lookup.","url":"https://api.youraitools.co/pkgguard/v1/package?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["name","version"],"properties":{"name":{"type":"string","description":"Package name, e.g. lodash"},"version":{"type":"string","description":"Exact version, e.g. 4.17.15"},"ecosystem":{"type":"string","description":"One of npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet, Pub, Hex (default npm)"}},"description":"Search intents: package vulnerability check, is this npm package safe, cve lookup api, pypi vulnerability, malicious package check, osv lookup"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"tier":{"type":"string"},"source":{"type":"object"},"verdict":{"type":"string"},"packages":{"type":"array"},"disclaimer":{"type":"string"},"package_count":{"type":"number"},"scanned_count":{"type":"number"},"advisory_count":{"type":"number"},"unpinned_count":{"type":"number"},"malicious_count":{"type":"number"},"highest_severity":{"type":"string"},"vulnerable_count":{"type":"number"}}}}}}},"responseSchema":{"type":"json","example":{"tier":"full","source":{"name":"OSV.dev"},"verdict":"vulnerable","packages":[{"name":"lodash","vulns":[{"id":"GHSA-35jh-r3h4-6jhm","url":"https://osv.dev/vulnerability/GHSA-35jh-r3h4-6jhm","aliases":["CVE-2021-23337"],"summary":"Command Injection in lodash","fixed_in":["4.17.21"],"severity":"HIGH","malicious":false,"cvss_score":7.2}],"version":"4.17.15","ecosystem":"npm","malicious":false,"vuln_count":6,"version_source":"exact","highest_severity":"HIGH"}],"disclaimer":"Informational: lists published advisories from OSV.dev for the versions given.","package_count":1,"scanned_count":1,"advisory_count":6,"unpinned_count":0,"malicious_count":0,"highest_severity":"HIGH","vulnerable_count":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SMldDONyDcmGU6qoh7faF","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a specific version of an open-source package against the OSV.dev vulnerability database and returns a verdict with CVE details, severity scores, and fix versions.","exampleAgentPrompt":"Can you check if lodash version 4.17.15 on npm has any known vulnerabilities — I need to know the severity and whether there's a fixed version I should upgrade to?","exampleUseCases":[{"title":"Pre-install security check for CI/CD","prompt":"Before we deploy, can you check if express version 4.18.2 on npm has any known CVEs or malicious flags? I need severity and fix info."},{"title":"Python dependency audit before release","prompt":"We're about to ship a release using requests 2.27.1 from PyPI — can you scan it for security vulnerabilities and tell me the highest severity found?"},{"title":"Supply chain safety check for Rust crate","prompt":"I'm adding serde 1.0.130 from crates.io to our project — does it have any known vulnerabilities I should worry about?"}],"resultDescription":"A JSON object containing a verdict ('vulnerable' or 'safe'), a list of packages with per-package vulnerability details including CVE IDs, CVSS scores, severity tiers, affected versions, fix versions, malicious flags, and summary counts (advisory count, vulnerable count, malicious count, highest severity).","failureModes":["Package name or version not found in OSV.dev — returns empty vulnerability list","Unsupported ecosystem string — defaults to npm or returns error","Missing required 'name' or 'version' query parameters — returns 400 error","OSV.dev upstream unavailable — service may return 503 or timeout","Version string must be exact — fuzzy or range versions may not match advisories correctly"],"whenToPreferThis":"Choose PkgGuard when you need a quick, pay-per-call vulnerability check against OSV.dev for a specific package version without setting up your own OSV API integration. It is especially useful in agentic pipelines that need to gate on security verdict before installing or deploying a dependency, and when you need structured JSON output with severity and fix-version data. Prefer alternatives if you need bulk scanning of entire lock files, continuous monitoring, or a source beyond OSV.dev.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-27T12:43:28.848Z","isFirstParty":false,"canonicalSlug":"pkgguard-by-agentgate-d344a7fa"}