{"uid":"cap_lAU_rgPeYxjAkeH8YrJ4w","slug":"halowerk-sicherwerk-zip-archive-inventory-audit-1e4672ea","name":"HALOWERK sicherwerk ZIP Archive Inventory Audit","description":"Reads the central directory of a supplied ZIP archive with the pinned unzip build and reports what it would do if you unpacked it, without unpacking anything. Every entry is listed with its uncompressed size and method, and three specific hazards are named: paths that climb out of the target directory, names the archive repeats so that a later entry silently overwrites an earlier one, and a total uncompressed size far out of proportion to the archive.","url":"https://sicher.halowerk.com/v1/oss-zip-archive-inventory-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType"],"properties":{"type":{"const":"http"},"method":{"const":"POST"},"bodyType":{"const":"json"},"schemaUrl":{"type":"string","format":"uri"},"exampleUrl":{"type":"string","format":"uri"}},"additionalProperties":true},"output":{"type":"object","required":["type"],"properties":{"type":{"const":"json"},"schemaUrl":{"type":"string","format":"uri"},"exampleUrl":{"type":"string","format":"uri"}},"additionalProperties":true}},"additionalProperties":true},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_IVPY2bu_3vnfvEp6PV4xF","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a ZIP archive's central directory to list all entries with sizes and methods, and flags path traversal, duplicate filenames, and zip bomb hazards — without extracting any files.","exampleAgentPrompt":"Before we unpack that user-uploaded ZIP, can you audit its central directory for path traversal entries, duplicate filenames, and zip bomb risk — without actually extracting anything?","exampleUseCases":[{"title":"Pre-deployment artifact safety check","prompt":"We're about to unpack a build artifact ZIP onto our server — can you inspect its directory listing first and flag any entries that try to climb out of the target folder, any filenames that appear more than once, or any signs it's a zip bomb?"},{"title":"User-uploaded file security gate","prompt":"A user just uploaded a ZIP file to our platform. Before we process it, audit its contents for path traversal attacks, overwrite hazards from duplicate names, and abnormal compression ratios — don't extract anything, just tell me what's in there and whether it's safe."},{"title":"Open-source package vetting","prompt":"I downloaded this third-party ZIP package and want to know what's inside before installing it — list every entry with its uncompressed size and compression method, and call out anything suspicious like zip slip paths or entries that would clobber each other."}],"resultDescription":"A structured JSON report listing every entry in the ZIP's central directory with its uncompressed size and compression method, plus three specific hazard flags: (1) path traversal entries whose names escape the target directory, (2) duplicate filenames where a later entry would silently overwrite an earlier one, and (3) a zip bomb indicator when the total uncompressed size is disproportionate to the archive size.","failureModes":["Invalid or corrupt ZIP archive returns an error describing the parse failure","Archive too large to process returns a size limit error","Non-ZIP file submitted returns a format rejection error","Network timeout if the archive URL is unreachable","Missing required input field returns a validation error"],"whenToPreferThis":"Choose this endpoint when you need a fast, read-only security pre-flight check on a ZIP archive before unpacking it — especially for user-supplied, third-party, or untrusted ZIPs. It is ideal for CI/CD pipelines, upload gateways, and automated security workflows where you need to detect zip slip, overwrite, or zip bomb hazards without the risk of actually extracting potentially malicious files. Prefer it over generic file scanners when you specifically need structured ZIP central-directory analysis with pinned, reproducible tooling.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:32:58.680Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-zip-archive-inventory-audit-1e4672ea"}