{"uid":"cap_Lz3SiE-i2e6XmqOCfFmUJ","slug":"agent-kiosk-package-cve-audit-api-d64f5a08","name":"Agent Kiosk Package CVE Audit API","description":"Open-source package & CVE vulnerability scanner for coding agents (npm, PyPI, crates.io) powered by Google OSV.dev.","url":"https://agent-kiosk.vercel.app/v1/package-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"name":{"type":"string","description":"Package name"},"version":{"type":"string"},"ecosystem":{"enum":["npm","pypi","crates.io"],"type":"string"}}},"responseSchema":{"type":"json","example":{"package":"express","verdict":"CLEAN","ecosystem":"npm","latest_version":"5.1.0","vulnerability_count":0}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_A4uv2A3bmRnpbO-FlEev_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits open-source packages (npm, PyPI, crates.io) for known CVEs and security vulnerabilities, returning a security report for a given package name and optional version.","exampleAgentPrompt":"Can you run a CVE security audit on the npm package 'lodash' version 4.17.20 and tell me if there are any known vulnerabilities I should be worried about?","exampleUseCases":[{"title":"Pre-deployment dependency security check","prompt":"Before I ship this release, can you audit the npm package 'express' at version 4.18.2 for any known CVEs or security issues?"},{"title":"Python package vulnerability scan","prompt":"I'm about to add 'requests' version 2.28.0 from PyPI to my project — can you check it for any known security vulnerabilities first?"},{"title":"Rust crate security audit","prompt":"Can you audit the 'tokio' crate on crates.io for any CVEs or security problems before I use it in production?"}],"resultDescription":"Returns a JSON object with an 'ok' boolean and a 'data' object containing the CVE and security vulnerability findings for the specified package, including vulnerability identifiers, severity levels, affected versions, and remediation guidance where available.","failureModes":["Package name not found in the specified ecosystem — returns error or empty results","Invalid ecosystem enum value — request rejected","Rate limiting or payment failure via x402 — call blocked","Unknown or unsupported version string — may default to latest or return error","No CVE data available for obscure/new packages — empty findings returned"],"whenToPreferThis":"Choose this endpoint when you need a quick, pay-per-call CVE and vulnerability audit for a specific open-source package across npm, PyPI, or crates.io ecosystems without setting up a full SAST pipeline. Ideal for AI agents performing automated dependency checks, pre-deployment security gates, or ad-hoc vulnerability lookups on individual packages at low cost ($0.01 per call).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:39:31.866Z","isFirstParty":false,"canonicalSlug":"agent-kiosk-package-cve-audit-api-d64f5a08"}