OpenAPI Contract Audit + Safe Pytest Scaffold

Audit one public OpenAPI 3.x JSON or YAML document and receive prioritized contract findings, a quality score, a Markdown handoff, and a safe read-only pytest scaffold.

$15 USDC on Base to 0xd3CE8223E6b0F446a887953aF623B9c72233Ba39

Preview JSON · OpenAPI · Paid endpoint

Delivery

  • Prioritized high, medium, and low contract findings with exact locations and fixes
  • 0-100 contract quality score, grade, operation inventory, and SHA-256 evidence
  • Reviewer-ready Markdown report
  • Generated pytest scaffold limited to GET, HEAD, and OPTIONS operations

Checks

  • Missing or duplicate operationId values
  • Undeclared and non-required path parameters
  • Missing success, client-error, server-error, schema, and example coverage
  • Undefined security schemes and malformed component schemas
  • GET request bodies and other portability risks

Input

spec_url=https://example.com/openapi.json

Safety Boundary

  • Public HTTPS OpenAPI input only; redirects and credential-like query parameters are rejected
  • Private, loopback, link-local, reserved, and documentation networks are blocked
  • The outbound connection is pinned to the validated public DNS address
  • No API operations are called and no mutating tests are generated

AI Agent Skill Security Audit

Audit an AI agent skill before installation using deterministic static analysis for prompt injection, credential access, exfiltration, destructive commands, dynamic execution, supply-chain, persistence, network, and wallet risks.

$0.12 USDC on Base

Preview JSON · Paid endpoint

Delivery

  • LOW_RISK, REVIEW, or BLOCK verdict with a 0-100 risk score
  • Line-level, secret-redacted findings and concrete remediation
  • Detected capabilities, network destinations, category counts, and SHA-256 evidence
  • Reviewer-ready Markdown report with an explicit static-analysis boundary

Safety Boundary

  • Submitted text is never executed
  • Referenced URLs are never fetched
  • Secret-like evidence is redacted from output
  • No input is retained by the service

CI Failure Fast Diagnosis

Diagnose one CI log as inert text and receive the primary failure, three redacted findings, focused next steps, and safe rerun commands.

$1 USDC on Base

Preview JSON · Paid endpoint

Delivery

  • Primary compiler, test, dependency, runner, or exit-code failure
  • Up to three prioritized findings with secret-redacted evidence
  • Up to three focused next steps and two safe rerun commands
  • SHA-256 input evidence and explicit safety counters

Safety Boundary

  • The log is parsed as inert text and is never executed
  • No URLs are fetched and no repository or cloud credentials are requested
  • GitHub, bearer, API-key, token, and private-key patterns are redacted
  • The full input log is not returned or retained

CI Failure Triage + Reproduction Handoff

Parse one CI log as inert text and receive prioritized failure signatures, redacted evidence, focused rerun commands, and a reviewer-ready Markdown handoff.

Preview JSON · Paid endpoint

Delivery

  • Prioritized compiler, test, dependency, runner, and exit-code findings
  • Redacted evidence with file and line locations when present
  • Focused rerun commands inferred from the detected toolchain
  • Reviewer-ready Markdown triage and SHA-256 input evidence

Safety Boundary

  • The log is parsed as inert text and is never executed
  • No URLs are fetched and no repository or cloud credentials are requested
  • GitHub, bearer, API-key, token, and private-key patterns are redacted
  • The full input log is not returned or retained