{"uid":"cap_SBTUXHYMyM1JWHqCASCfK","slug":"trollbridge-skill-scan-167fe04e","name":"TrollBridge Skill-Scan","description":"The insurance booth for AI agents, with Mini's Agent Supply Store on the side of the road. One hundred checkpoints: pre-transaction safety lanes (honeypot, approval-risk, rug-score, receipt-check, tx-dryrun, permit-scan, airdrop-verdict, deployer-history, wallet-watch, secret-scan at $0.02 USDC per call; the protection tier — /contract-check, /approval-screen, /tx-plain-english, /honeypot-check, /tx-simulate, /redteam, /skill-scan, /verdict, /egress-audit, /tool-gate, /airlock, /repo-scan, /prove, /task-scope — at $0.10; the one-call /shield don't-get-rugged screen at $0.25; the full /preflight bundle at $0.05), bounty intel (bounties, fresh, verdicts, deadlines, sweepstakes, opportunities) at $0.02 USDC per call, trader intel (/prices and /quant at $0.02; /enrich and /token-check at $0.05; /contract-check and /honeypot-check at $0.10; /sec-facts at $0.05), market intel (/markets and /search at $0.05; /grants at $0.02), DeFi intel (/yields and /new-pairs at $0.05; /gas and /defi at $0.02), AI intel (/models at $0.02), agent-ops intel (/prompt-cost, /model-picks, /rpc-speed, /terms-tldr, /scrape, /gigs, /retry-verify, /idempotency, /verify-independent at $0.02; /site-watch, /wallet-check, /code-run, /regulatory-pack, /sage, /cron-watch, /caveat-check, /tripwire, /escrow, /trust, /bridge-fees, /dao-votes, /dev-activity, /dex-arb, /dydx-perps, /funding-rates, /gas-predict, /hack-tracker, /long-short-ratio, /lp-yields, /mev-scan, /open-interest, /perp-basis, /polymarket-odds, /rwa-watch, /sentiment, /stablecoin-flows, /tokenomics, /top-movers, /whale-watch, and /yield-stable at $0.05; /approval-screen, /tx-plain-english, /tx-simulate, and /task-scope at $0.10; /scam-scan deep scan at $5.00 or 30-day subscription at $30.00), supply store (/road-pack combo meal at $0.05; curated datasets, the /audit-prep pre-audit review, and the /prove-state symbolic-execution run at $1.00; the /audit AI-agent audit at $25.00). Every lane answers before money moves — heuristic verdicts, not audits. Don't get rugged.","url":"https://mini-tollbooth.onrender.com/skill-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"URL of the skill's SKILL.md (http/https only, fetched as text, 200KB cap) — or pass text= instead."},"text":{"type":"string","description":"Alternative: paste the skill markdown text directly instead of url=."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"url":"https://example.com/skill/SKILL.md","lane":"/skill-scan","score":45,"summary":"…","verdict":"suspicious","findings":[{"code":"shell-exec","title":"Shell execution","detail":"…","severity":"high"}],"description":"NOT AN AUDIT — heuristic screen: skill supply-chain scan ($0.10) — fetch a skill's SKILL.md and screen it for prompt-injection, credential theft, and exfiltration patterns before you install it. Verdict: clean, suspicious, or dangerous, with findings."}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_jbACjCA6dgLYXQ0YsDMEc","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches and heuristically screens an AI skill's SKILL.md file for prompt-injection, credential theft, and data exfiltration patterns before installation","exampleAgentPrompt":"Before I install this new agent skill, can you screen its SKILL.md at https://example.com/skills/my-tool/SKILL.md for prompt injection, credential theft, or exfiltration patterns and tell me if it's safe?","exampleUseCases":[{"title":"Vetting a third-party agent skill","prompt":"I found a skill at https://github.com/some-dev/agent-skills/blob/main/SKILL.md — can you scan it before I install it and tell me if it's clean, suspicious, or dangerous?"},{"title":"Marketplace skill safety check","prompt":"Before my AI agent adds this new DeFi tool from the skill store, screen its SKILL.md at https://skillstore.example.com/defi-trader/SKILL.md for any prompt injection or data theft patterns."},{"title":"Inline skill text audit","prompt":"Here's the skill markdown I'm about to install — can you check it for exfiltration patterns or hidden instructions that could hijack my agent? Just paste it directly and give me a verdict."}],"resultDescription":"Returns a JSON object with a numeric risk score (0-100), a verdict string ('clean', 'suspicious', or 'dangerous'), a plain-English summary, and a list of findings each containing a code, title, detail description, and severity level (e.g. 'high'). Also echoes back the scanned URL and the lane identifier.","failureModes":["URL not reachable or returns non-200 — scan cannot proceed","SKILL.md exceeds 200KB cap — content truncated or rejected","Neither url= nor text= provided — missing required query parameter","URL uses non-http/https scheme (e.g. file://) — rejected","Service unavailable on onrender.com free tier (cold start timeout)","Payment of 0.10 USDC not fulfilled — 402 response, scan not executed"],"whenToPreferThis":"Choose this endpoint when an AI agent needs to vet a third-party skill or tool before installation, specifically by fetching and analyzing its SKILL.md file for supply-chain attacks such as prompt injection, credential harvesting, or covert exfiltration. Prefer it over generic code auditors because it understands agent-skill conventions and SKILL.md structure, returns an agent-actionable verdict with severity-ranked findings, and integrates with x402 micropayment rails at a fixed $0.10 per call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:48:54.687Z","isFirstParty":false,"canonicalSlug":"trollbridge-skill-scan-167fe04e"}