{"uid":"cap_YEKVi_zVIWrMNr_9EEeMc","slug":"power-strip-security-agent-skill-audit-72baea0b","name":"Power Strip Security – Agent Skill Audit","description":"Agent skill audit: check a SKILL.md folder (scripts, references) or AGENTS.md, CLAUDE.md, .cursorrules before an agent loads it. Findings by file and line: prompt injection, curl | bash, encoded commands, credential theft, exfiltration, hardcoded keys, persistence, spec errors. Paste the files or one URL. Nothing runs, nothing is stored. Cheap enough for every PR. Also: /v1/read $0.005, /v1/scan $0.002, /v1/mcp-audit $0.01, /v1/skill-audit $0.005. Remote MCP: /mcp. 10 free/new wallet.","url":"https://api.powerstripsecurity.workers.dev/v1/skill-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"files":{"type":"array","items":{"type":"object"},"description":"Skill files as {path, content}: SKILL.md, scripts, references, AGENTS.md. Or send url."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_dkaXVzt6ehWV4gSg6xc8Y","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Statically audits SKILL.md, AGENTS.md, CLAUDE.md, .cursorrules, and related agent skill files for security threats like prompt injection, credential theft, and malicious commands before an agent loads them.","exampleAgentPrompt":"Before we load this new SKILL.md into production, can you run a security audit on it to check for prompt injection, hardcoded credentials, curl-pipe-bash patterns, or any exfiltration attempts? Here are the file contents: [paste SKILL.md content].","exampleUseCases":[{"title":"PR review for new skill files","prompt":"We have a pull request adding a new SKILL.md and some reference scripts — can you audit those files for security issues like prompt injection, hardcoded keys, or encoded commands before I approve the merge?"},{"title":"Vetting a third-party AGENTS.md","prompt":"I found an AGENTS.md from a GitHub repo I want to use with my agent fleet — can you security-scan it for credential theft, exfiltration patterns, or persistence mechanisms before I let my agents load it?"},{"title":"Auditing a .cursorrules file","prompt":"Someone on the team added a .cursorrules file to our repo — can you check it line by line for prompt injection or any malicious instructions that could hijack our coding agent?"}],"resultDescription":"Returns a structured list of security findings organized by file and line number, covering threat categories including prompt injection, curl|bash patterns, base64/encoded commands, credential theft, data exfiltration attempts, hardcoded API keys or secrets, persistence mechanisms, and specification errors. Each finding identifies the specific file, line, and nature of the threat.","failureModes":["Empty or missing files array and no URL provided — returns error requesting input","URL provided but page is inaccessible or returns non-200 — returns fetch error","File content too large — may return truncation or size limit error","Malformed JSON input — returns 400 validation error","Payment not processed via x402 — returns 402 Payment Required before scan runs"],"whenToPreferThis":"Choose this endpoint when you need static security analysis specifically of agent skill definition files (SKILL.md, AGENTS.md, CLAUDE.md, .cursorrules, skill scripts) before an agent loads them — particularly in CI/CD pipelines or PR review workflows. It is purpose-built for agentic supply-chain threats rather than general web content or MCP server auditing (use sibling endpoints for those). Ideal when you want cheap-enough-for-every-PR automated skill file vetting.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-01T11:06:35.827Z","isFirstParty":false,"canonicalSlug":"power-strip-security-agent-skill-audit-72baea0b"}