# BountyVerdict SkillVerdict – Pre-Install Security Audit for Agent SKILL.md

> BountyVerdict SkillVerdict – Pre-Install Security Audit for Agent SKILL.md is a paid API for AI agents from bountyverdict-agent-production.mimirslab.workers.dev, paid per call via x402, $0.06/call, status unknown (last checked 2026-09-15).

Performs a static security audit of a public GitHub agent SKILL.md bundle before installation, scanning for credential exfiltration, hidden scripts, hardcoded secrets, and other threats, and returning a risk verdict (LOW_RISK, REVIEW, or BLOCK).

## Facts

- Endpoint: POST https://bountyverdict-agent-production.mimirslab.workers.dev/api/skill
- Price: $0.06/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/bountyverdict-skillverdict-pre-install-security-audit-for-agent-skill-d2e1fc6f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_cpNHQrj5GMT92hkU2_r6X

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability bountyverdict-skillverdict-pre-install-security-audit-for-agent-skill-d2e1fc6f -d '<json body>'
```

Example prompt: Before I install this agent skill, can you do a full security audit of the skill at 'skills/web-search' in https://github.com/acme-org/agent-skills and tell me whether it's safe — specifically checking for credential theft, hidden scripts, or undeclared capabilities?

## When to prefer this

Use this endpoint when an AI agent or developer needs to vet a third-party SKILL.md bundle before adding it to an agent's capability set — especially when the skill comes from an untrusted or unfamiliar GitHub repository. Prefer this over general code scanners because it understands agent-specific threat vectors like instruction evasion, capability laundering, and AI-targeted prompt injection, and it pins the scan to an immutable commit for reproducibility.

## Known failure modes

- Invalid or non-public GitHub repo URL returns validation error
- skill_path not found in repository returns a path resolution error
- GitHub API rate limit exhausted returns rate-limit error with remaining count
- Repository too large or skill directory exceeds scan limits triggers truncation flag
- Malformed SKILL.md or missing required fields may produce partial scan results

## How this service works

Seven bounded decision APIs for coding agents: evidence-linked GitHub due diligence and diagnostics plus deterministic MCP tool-catalog compatibility and security gates. Payment uses x402 v2 and Base USDC.

## Output

A structured JSON report including: a top-level verdict (LOW_RISK, REVIEW, or BLOCK), a numeric risk score, a human-readable summary, a list of specific findings with severity, actionable recommendations, declared vs. actual capabilities diff, repository and skill metadata (name, path, files), and coverage stats (files scanned, bytes, skipped binaries, GitHub rate limit remaining).

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "skill": {
   "name": "release",
   "path": "skills/release/SKILL.md",
   "files": [
    "skills/release/SKILL.md",
    "skills/release/scripts/deploy.sh"
   ],
   "description": "Deploy the service using the repository release script."
  },
  "product": "SkillVerdict",
  "summary": "The skill has consequential behavior or structural ambiguity that requires manual review before installation.",
  "verdict": "REVIEW",
  "version": "1.0",
  "coverage": {
   "bytes_scanned": 4820,
   "files_scanned": 2,
   "skipped_binary": 1,
   "entries_in_skill": 3,
   "skipped_oversized": 0,
   "selection_truncated": false,
   "github_rate_limit_remaining": 4997
  },
  "findings": [
   {
    "code": "UNDECLARED_CAPABILITY",
    "file": null,
    "line": null,
    "message": "Observed system configuration behavior is not disclosed by the skill description or instructions.",
    "severity": "high",
    "evidence_url": "https://github.com/acme/agent-skills/blob/0123456789abcdef0123456789abcdef01234567/skills/release/SKILL.md"
   }
  ],
  "checked_at": "2026-07-20T00:00:00.000Z",
  "repository": {
   "url": "https://github.com/acme/agent-skills",
   "archived": false,
   "full_name": "acme/agent-skills",
   "commit_sha": "0123456789abcdef0123456789abcdef01234567",
   "default_branch": "main"
  },
  "risk_score": 30,
  "limitations": [
   "This static audit never executes the skill and cannot prove that a low-risk result is safe."
  ],
  "capabilities": {
   "declared": [
    "network",
    "shell"
   ],
   "observed": [
    "network",
    "shell",
    "system_configuration"
   ],
   "external_domains": [
    "api.cloudflare.com"
   ]
  },
  "service_reuse": {
   "guidance": "Call SkillVerdict when no current audit exists for the exact public skill commit and path, and again whenever either changes; each successful audit re-reads the bounded bundle and pins its findings.",
   "reusable": true,
   "reliability": "bounded_live_check",
   "fresh_result_per_successful_call": true
  },
  "recommendations": [
   "Disclose every consequential capability in the skill description and least-privilege workflow."
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/bountyverdict-skillverdict-pre-install-security-audit-for-agent-skill-d2e1fc6f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from bountyverdict-agent-production.mimirslab.workers.dev](https://www.zero.xyz/host/bountyverdict-agent-production.mimirslab.workers.dev/llms.txt)