{"uid":"cap_QPbo0MZ0L0a91Yzh2YX7W","slug":"dotnetrisk-api-nuget-security-audit-df21cb48","name":"DotnetRisk API – NuGet Security Audit","description":"Paid NuGet vulnerability audits and .NET target-framework upgrade plans for coding agents. Source code is never collected.","url":"https://dotnetrisk-aschulten.onrender.com/v1/audits?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["input","output"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type","example"],"properties":{"type":{"type":"string","const":"json"},"example":{"type":"object"}},"additionalProperties":false}}},"responseSchema":{"type":"json","example":{"packages":[],"packageCount":1,"remediationPlan":[],"overallRiskLevel":"critical","overallRiskScore":90,"outdatedPackageCount":1,"vulnerablePackageCount":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_HNaF7O9EWtfDo17KGHSFN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6EDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a list of NuGet packages for vulnerabilities and produces a risk-scored remediation plan without requiring access to source code.","exampleAgentPrompt":"Can you run a security audit on my NuGet packages — I'm using Newtonsoft.Json 13.0.1 and log4net 2.0.12 — and tell me the overall risk level and what I need to upgrade?","exampleUseCases":[{"title":"CI pipeline vulnerability gate","prompt":"Before we merge this PR, can you audit our NuGet dependencies — Newtonsoft.Json 12.0.3, Microsoft.AspNetCore 2.2.0, and Serilog 2.10.0 — and flag anything critical that would block the release?"},{"title":"Legacy .NET upgrade scoping","prompt":"We're modernizing an old .NET Framework app. Can you check our package list — EntityFramework 6.0.0, WebAPI 5.2.7, and Autofac 4.9.4 — and give me a remediation plan showing what needs upgrading and how risky things are?"},{"title":"Third-party vendor dependency review","prompt":"I need to review the security posture of a vendor's .NET SDK before we integrate it — they're using Newtonsoft.Json 11.0.2 and BouncyCastle 1.8.5. Can you give me a risk score and any known vulnerabilities?"}],"resultDescription":"Returns a JSON object containing: overall risk level (e.g. 'critical'), overall risk score (0–100), a list of audited packages with individual vulnerability details, the count of vulnerable and outdated packages, and a remediation plan with recommended upgrades or mitigations.","failureModes":["Missing or malformed package list in request body returns a 400 error","Unknown or unpublished package versions may not match vulnerability data, returning empty results","Payment not included or insufficient USDC causes a 402 Payment Required response","Service unavailable on Render cold-start may cause initial timeout","Very large package lists may exceed processing time limits"],"whenToPreferThis":"Choose this endpoint when you need a NuGet-specific security audit that does not require uploading or sharing source code — ideal for CI/CD pipelines, vendor assessments, or auditing third-party libraries. Prefer it over generic SCA tools when you want a structured risk score plus an actionable upgrade plan returned in a single API call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:31:33.569Z","isFirstParty":false,"canonicalSlug":"dotnetrisk-api-nuget-security-audit-df21cb48"}