{"uid":"cap_mOSGDNd7NBUh0Jkr78weA","slug":"orac-safety-layer-ai-agent-security-api-code-audit-4bdc7d2f","name":"Orac Safety Layer — AI Agent Security API (Code Audit)","description":"Audit skill source code for security vulnerabilities","url":"https://orac-safety.orac.workers.dev/v1/audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["code"],"properties":{"code":{"type":"string","maxLength":200000,"description":"Source code to audit for security vulnerabilities"},"filename":{"type":"string","description":"Original filename (for context in report)"}}},"responseSchema":{"meta":{"service":"orac-safety-layer","version":"1.0.0","filename":"skill.js","linesOfCode":2,"patternsChecked":16},"summary":{"low":0,"high":1,"medium":0,"critical":1},"verdict":"FAIL","findings":[{"id":"CRED_EXFIL","severity":"critical","description":"Potential credential exfiltration via fetch()"}],"riskScore":77},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PYv7emoLioMcDaZlgHk5a","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits skill source code for security vulnerabilities, returning a risk score, severity-bucketed findings, and a PASS/FAIL verdict","exampleAgentPrompt":"Can you audit this skill.js source code for security vulnerabilities and tell me the risk score, any critical or high findings, and whether it passes or fails?","exampleUseCases":[{"title":"Pre-deployment skill security check","prompt":"Before I push this new agent skill to production, can you scan the source code for any security vulnerabilities, flag anything critical or high severity, and let me know if it passes or fails the audit?"},{"title":"Credential exfiltration risk detection","prompt":"I'm worried this skill might be leaking API keys or credentials — can you run a security analysis on the code and tell me if there are any credential exfiltration risks or unsafe data handling patterns I should fix?"},{"title":"Compare security of two skill versions","prompt":"I've updated my agent skill to patch some issues — can you audit both the old and new versions of the code and compare their risk scores and findings so I can confirm the new version is actually safer?"}],"resultDescription":"Returns a JSON object with a meta block (service version, filename, lines of code, number of patterns checked), a summary of findings by severity (low, medium, high, critical), a PASS/FAIL verdict, an array of detailed findings each with an ID, severity, and description, and an overall numeric risk score from 0–100.","failureModes":["Code exceeds 200,000 character limit — request rejected","Missing required 'code' field — 400 Bad Request","Malformed JSON body — parse error response","Payment not completed — 402 Payment Required","Service unavailable or timeout — 5xx error"],"whenToPreferThis":"Use this endpoint when you need static security analysis of AI agent skill source code specifically — especially when checking for credential exfiltration, unsafe fetch patterns, or other agent-specific attack vectors before deployment. Prefer this over generic SAST tools when auditing skills in the AI agent ecosystem context.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:34:19.019Z","isFirstParty":false,"canonicalSlug":"orac-safety-layer-ai-agent-security-api-code-audit-4bdc7d2f"}