{"uid":"cap_t9-MOraGw8owQaR8YTMrU","slug":"proofline-diff-risk-check-b592b175","name":"Proofline Diff Risk Check","description":"Evidence-backed product validation and SaaS conversion audits, including a fixed $250 validation sprint with reproducible, Linear-ready defects.","url":"https://proofline-audit.chrismellado.chatgpt.site/api/x402/diff-risk-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"diff":{"type":"string","maxLength":60000,"minLength":1,"description":"Unified diff text inspected as untrusted data and never executed"},"focus":{"type":"string","maxLength":120,"description":"Optional short review focus included in the report"}}},"responseSchema":{"type":"json","example":{"score":63,"product":"Proofline Diff Risk Check","summary":"2 risk signal(s) found across 1 changed file(s); 1 high, 1 medium, 0 low.","verdict":"blocked","version":"1.0.0","findings":[{"id":"dynamic-execution-1","file":"src/run.ts","line":1,"risk":"Dynamic execution can turn user-controlled text into arbitrary code or operating-system commands.","title":"Untrusted text may reach dynamic code or shell execution","repair":"Use a fixed command or parser, pass arguments without a shell, and validate every external value.","category":"execution","evidence":"+return eval(input);","severity":"high"}],"severityCounts":{"low":0,"high":1,"medium":1}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.25","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.25/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gdesVwHo6q7rtQ28sF1e5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.25","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a code diff for security and quality risk signals, returning scored findings with severity levels, repair suggestions, and a blocked/pass verdict.","exampleAgentPrompt":"Can you run a diff risk check on this patch from src/run.ts — it adds a line like `return eval(input)` — and tell me if it's blocked, what the severity breakdown is, and what I should do to fix it?","exampleUseCases":[{"title":"Pre-merge security gate for PRs","prompt":"Before I merge this pull request, run a Proofline diff risk check on the changed files and tell me if anything is blocked — especially any dynamic execution or shell injection issues I should fix first."},{"title":"CI pipeline automated risk scoring","prompt":"I'm setting up an automated check in my CI pipeline. Scan this diff from our latest commit and give me the overall risk score, the verdict, and a list of findings I can turn into Linear tickets."},{"title":"Auditing untrusted user-input handling","prompt":"We just refactored the part of our app that handles user-supplied text — can you run a risk check on this diff and flag anywhere that untrusted input might reach eval, exec, or shell commands?"}],"resultDescription":"Returns a JSON object with a numeric risk score (0-100), a verdict ('blocked' or 'pass'), a summary string, an array of findings each containing file path, line number, severity (high/medium/low), risk description, repair advice, category, and the evidence snippet, plus aggregated severity counts.","failureModes":["Malformed or missing diff payload returns a validation error","Empty diff with no changed files may return a zero-finding result with no meaningful verdict","Extremely large diffs may exceed payload size limits","Unsupported file types or binary diffs may not produce findings","Network or payment authorization failure returns a 402 or 5xx error"],"whenToPreferThis":"Choose this endpoint when you need a fast, per-diff security risk score with actionable, Linear-ready findings tied to specific lines of code — especially for detecting dynamic code execution, shell injection, and untrusted input handling. Prefer it over generic linters when you want a scored verdict (blocked vs. pass) with structured repair guidance suitable for automated CI gating or ticket creation.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-14T18:41:00.012Z","isFirstParty":false,"canonicalSlug":"proofline-diff-risk-check-b592b175"}