{"uid":"cap_ggCjvJ9I1Cm2zX85YJSiM","slug":"synthr-cyber-stack-brief-230a3299","name":"Synthr Cyber Stack Brief","description":"Agent-native cybersecurity intelligence. Real OSV + EPSS + KEV data. Stack briefs, dep audits, advice, web reconnaissance. Prioritized for autonomous builders and harnesses.","url":"https://synthr.online/v1/cyber/stack-brief?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["stack"],"properties":{"depth":{"enum":["quick","standard","deep"],"type":"string"},"stack":{"type":"object"},"context":{"type":"string","description":"Optional project context description"}}},"responseSchema":{"type":"object","properties":{"asOf":{"type":"string","format":"date-time"},"queryId":{"type":"string"},"sources":{"type":"array","items":{"type":"object","properties":{"url":{"type":"string"},"type":{"type":"string"},"title":{"type":"string"},"fetchedAt":{"type":"string"}}}},"confidence":{"type":"number","maximum":1,"minimum":0},"disclaimer":{"type":"string"},"agentActions":{"type":"array","items":{"type":"string"}},"stackSummary":{"type":"object","properties":{"highFindings":{"type":"integer"},"criticalFindings":{"type":"integer"},"packagesAnalyzed":{"type":"integer"}}},"prioritizedRisks":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"cve":{"type":"string"},"kev":{"type":"boolean"},"epss":{"type":"number"},"title":{"type":"string"},"severity":{"enum":["CRITICAL","HIGH","MEDIUM","LOW"],"type":"string"},"percentile":{"type":"number"},"agentSurface":{"type":"string"},"patchPriority":{"type":"string"},"recommendedActions":{"type":"array","items":{"type":"string"}}}}}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_MvywtURORBp4e98Wsi8SV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x036CbD53842c5426634e7929541eC2318f3dCF7e","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a software dependency stack against real OSV, EPSS, and KEV vulnerability data to produce a prioritized security risk brief for autonomous agents","exampleAgentPrompt":"Can you run a security stack brief on my Python project — it uses Flask 2.3.0, SQLAlchemy 1.4.41, and requests 2.28.0 — and prioritize any critical or KEV-listed CVEs I should patch right away?","exampleUseCases":[{"title":"Pre-deployment dependency security audit","prompt":"Before we ship to production, run a security brief on our Node.js stack: express 4.18.2, axios 1.3.4, lodash 4.17.20, and jsonwebtoken 8.5.1 — flag anything that's in the CISA KEV list or has a high EPSS score."},{"title":"CI pipeline vulnerability gate check","prompt":"Audit our Python backend stack — Django 3.2.18, Pillow 9.0.1, cryptography 38.0.1 — and tell me if there are any critical findings I should block the build on."},{"title":"Open source project security posture review","prompt":"I'm maintaining an open source Rust + JavaScript project using actix-web 4.2.1 and react 17.0.2 with webpack 5.74.0 — give me a prioritized risk brief so I know what vulnerabilities to disclose to users."}],"resultDescription":"Returns a structured security brief including a stack summary (packages analyzed, critical and high finding counts), a prioritized list of risks each with CVE ID, severity, EPSS score and percentile, KEV flag, agent surface description, patch priority rating, and recommended remediation actions, plus source citations, a confidence score, and a list of suggested next agent actions.","failureModes":["Missing required 'stack' field returns validation error","Unrecognized package names or versions may yield no vulnerability matches","Very new CVEs not yet in OSV/EPSS databases may be missed","Network timeout if upstream OSV or EPSS APIs are unavailable","Deeply nested or malformed stack objects may cause parsing errors"],"whenToPreferThis":"Choose this endpoint when you need structured, agent-consumable vulnerability intelligence grounded in authoritative data sources (OSV, EPSS, CISA KEV) rather than a generic package audit. It is especially valuable when you need exploit-probability scoring (EPSS) and known-exploited flags (KEV) together with patch prioritization, making it ideal for autonomous CI/CD pipelines or security-aware agents that need to make automated decisions about deployment readiness.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:26:18.167Z","isFirstParty":false,"canonicalSlug":"synthr-cyber-stack-brief-230a3299"}