{"uid":"cap_wUWI4HNYquSl3a1Mt1tPb","slug":"bot-bazaar-secret-leak-lint-3b6cd39f","name":"Bot Bazaar Secret Leak Lint","description":"Audit a comma-separated list of environment variable names to flag secret/key/token variables that must stay out of public config files.","url":"https://bot-bazaar.fly.dev/v1/x402/secret-leak-lint?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"vars":{"type":"string","description":"Comma-separated environment variable names"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_R3DXSWj-fQzxu7xVMQX69","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a comma-separated list of environment variable names to flag those that likely contain secrets, keys, or tokens that should not appear in public config files.","exampleAgentPrompt":"Can you audit these environment variable names and flag any that look like secrets, keys, or tokens that shouldn't be in a public config file: DATABASE_URL, STRIPE_SECRET_KEY, APP_NAME, OPENAI_API_KEY, DEBUG_MODE, AWS_ACCESS_KEY_ID?","exampleUseCases":[{"title":"Pre-commit config file security check","prompt":"Before I commit this config file, can you scan these variable names — NEXT_PUBLIC_URL, SENDGRID_API_KEY, NODE_ENV, GITHUB_TOKEN, PORT — and tell me which ones look like secrets that shouldn't be in a public repo?"},{"title":"CI/CD pipeline secret leak prevention","prompt":"I'm setting up a CI pipeline and want to make sure none of these env var names slip into public build logs. Can you lint them for secret/key/token patterns: BUILD_ID, JWT_SECRET, LOG_LEVEL, TWILIO_AUTH_TOKEN, MAX_RETRIES?"},{"title":"Onboarding developer env var review","prompt":"A new developer shared their .env.example file with these variable names and I need to flag any that look like real secrets before they push it: DB_HOST, PAYPAL_CLIENT_SECRET, APP_VERSION, REDIS_PASSWORD, ALLOWED_ORIGINS — can you check them?"}],"resultDescription":"Returns a structured analysis of the submitted environment variable names, identifying which ones match patterns associated with secrets, API keys, tokens, or credentials, and flagging them as potentially unsafe for inclusion in public configuration files.","failureModes":["Missing 'vars' query parameter returns an error or empty result","Non-string or malformed comma-separated input may cause parse errors","Very long variable name lists may be truncated or rejected","Payment failure (x402) prevents the call from being processed","Variable names with unusual casing or non-standard patterns may not be flagged correctly"],"whenToPreferThis":"Use this endpoint when you need a lightweight, cheap ($0.01 USDC) programmatic check on environment variable names — ideal for pre-commit hooks, CI/CD pipelines, or developer onboarding flows where you want to catch accidental secret exposure early. Prefer this over manual review when processing many variable names automatically or when integrating secret-leak detection into an agent workflow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T19:07:27.843Z","isFirstParty":false,"canonicalSlug":"bot-bazaar-secret-leak-lint-3b6cd39f"}