Skill Security Scanner — Static security scanner for AI agent skills. Detects 90...
Skill Security Scanner — Static security scanner for AI agent skills. Detects 90+ malicious patterns including code execution, shell injection, data exfiltration, credential theft, persistence mechanisms, prompt injection, and obfuscation. Returns a structured threat report with severity levels and line-by-line findings.
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://mercurio.agentscantina.com/x402/services/skill-scan", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Exact route checked
non 402
- Origin reachable
HEAD https://mercurio.agentscantina.com/ returned 404.
- Observed in 402-index
Discovered through bazaar.
- Registry record checked
Registry health: degraded.
EVIDENCE
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call.