{"uid":"cap_cpNHQrj5GMT92hkU2_r6X","slug":"bountyverdict-skillverdict-pre-install-security-audit-for-agent-skill-d2e1fc6f","name":"BountyVerdict SkillVerdict – Pre-Install Security Audit for Agent SKILL.md","description":"Seven bounded decision APIs for coding agents: evidence-linked GitHub due diligence and diagnostics plus deterministic MCP tool-catalog compatibility and security gates. Payment uses x402 v2 and Base USDC.","url":"https://bountyverdict-agent-production.mimirslab.workers.dev/api/skill","method":"POST","headers":{},"bodySchema":null,"responseSchema":{"type":"json","example":{"skill":{"name":"release","path":"skills/release/SKILL.md","files":["skills/release/SKILL.md","skills/release/scripts/deploy.sh"],"description":"Deploy the service using the repository release script."},"product":"SkillVerdict","summary":"The skill has consequential behavior or structural ambiguity that requires manual review before installation.","verdict":"REVIEW","version":"1.0","coverage":{"bytes_scanned":4820,"files_scanned":2,"skipped_binary":1,"entries_in_skill":3,"skipped_oversized":0,"selection_truncated":false,"github_rate_limit_remaining":4997},"findings":[{"code":"UNDECLARED_CAPABILITY","file":null,"line":null,"message":"Observed system configuration behavior is not disclosed by the skill description or instructions.","severity":"high","evidence_url":"https://github.com/acme/agent-skills/blob/0123456789abcdef0123456789abcdef01234567/skills/release/SKILL.md"}],"checked_at":"2026-07-20T00:00:00.000Z","repository":{"url":"https://github.com/acme/agent-skills","archived":false,"full_name":"acme/agent-skills","commit_sha":"0123456789abcdef0123456789abcdef01234567","default_branch":"main"},"risk_score":30,"limitations":["This static audit never executes the skill and cannot prove that a low-risk result is safe."],"capabilities":{"declared":["network","shell"],"observed":["network","shell","system_configuration"],"external_domains":["api.cloudflare.com"]},"service_reuse":{"guidance":"Call SkillVerdict when no current audit exists for the exact public skill commit and path, and again whenever either changes; each successful audit re-reads the bounded bundle and pins its findings.","reusable":true,"reliability":"bounded_live_check","fresh_result_per_successful_call":true},"recommendations":["Disclose every consequential capability in the skill description and least-privilege workflow."]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.06","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.06/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.06","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.06","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Rk0J59f8BHLBd5PAk3hrL","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.06","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a static security audit of a public GitHub agent SKILL.md bundle before installation, scanning for credential exfiltration, hidden scripts, hardcoded secrets, and other threats, and returning a risk verdict (LOW_RISK, REVIEW, or BLOCK).","exampleAgentPrompt":"Before I install this agent skill, can you do a full security audit of the skill at 'skills/web-search' in https://github.com/acme-org/agent-skills and tell me whether it's safe — specifically checking for credential theft, hidden scripts, or undeclared capabilities?","exampleUseCases":null,"resultDescription":"A structured JSON report including: a top-level verdict (LOW_RISK, REVIEW, or BLOCK), a numeric risk score, a human-readable summary, a list of specific findings with severity, actionable recommendations, declared vs. actual capabilities diff, repository and skill metadata (name, path, files), and coverage stats (files scanned, bytes, skipped binaries, GitHub rate limit remaining).","failureModes":["Invalid or non-public GitHub repo URL returns validation error","skill_path not found in repository returns a path resolution error","GitHub API rate limit exhausted returns rate-limit error with remaining count","Repository too large or skill directory exceeds scan limits triggers truncation flag","Malformed SKILL.md or missing required fields may produce partial scan results"],"whenToPreferThis":"Use this endpoint when an AI agent or developer needs to vet a third-party SKILL.md bundle before adding it to an agent's capability set — especially when the skill comes from an untrusted or unfamiliar GitHub repository. Prefer this over general code scanners because it understands agent-specific threat vectors like instruction evasion, capability laundering, and AI-targeted prompt injection, and it pins the scan to an immutable commit for reproducibility.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T18:37:41.521Z","isFirstParty":false}