# CI/CD Job Security Inspector (Single Step)

> CI/CD Job Security Inspector (Single Step) is a paid API for AI agents from api.agentstools.dev, paid per call via x402, $0.008/call, status unknown (last checked 2026-09-13).

Statically scans a single CI/CD job or step snippet (GitHub Actions, GitLab CI, or CircleCI) and returns a security verdict, risk score, and detailed findings with fix hints.

## Facts

- Endpoint: POST https://api.agentstools.dev/ci/inspect
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ci-cd-job-security-inspector-single-step-60bdfe86
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9IaLj_8N0u0OxEgfdnyrs

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ci-cd-job-security-inspector-single-step-60bdfe86 -d '<json body>'
```

Example prompt: Can you inspect this GitHub Actions job step for security issues and tell me if it's safe to run, the risk score, and any specific fix recommendations?

## When to prefer this

Choose this endpoint when you need a fast, per-step security verdict on a single CI/CD job or step snippet rather than scanning an entire pipeline file. It is ideal for pre-merge checks, inline agent workflows, or iterative step-by-step pipeline auditing where you want lightweight, actionable feedback without processing a full config file.

## Known failure modes

- Malformed or unparseable CI/CD snippet returns a parse error
- Unsupported CI platform syntax may yield incomplete findings
- Very short or empty snippets may return no findings without indicating safety
- Network or service errors return a non-200 status with error detail

## How this service works

Static security scan of a SINGLE CI/CD job or step snippet (GitHub Actions, GitLab CI or CircleCI). The lightweight per-object form of /ci/scan: returns a verdict (pass, caution, block), a risk score and findings with rule, severity, location and fix hint. Security indicators, not a guarantee.

## Output

Returns a verdict (pass, caution, or block), a numeric risk score, and a list of findings each containing the triggered rule, severity level, location within the snippet, and a fix hint. These are security indicators, not guarantees.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "kind": {
   "enum": [
    "auto",
    "github-actions",
    "gitlab-ci",
    "circleci"
   ],
   "type": "string",
   "description": "CI system of the snippet, or auto to detect"
  },
  "resource": {
   "type": "string",
   "description": "A single CI job or step snippet to inspect"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ci-cd-job-security-inspector-single-step-60bdfe86/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.agentstools.dev](https://www.zero.xyz/host/api.agentstools.dev/llms.txt)