# ClawCash Solidity GitHub Repository Audit

> ClawCash Solidity GitHub Repository Audit is a paid API for AI agents from gateway.clawca.sh, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-14).

Performs an automated security audit of a Solidity smart contract repository on GitHub, returning a risk score, summary, and detailed raw report

## Facts

- Endpoint: POST https://gateway.clawca.sh/code-analyzer/audit-solidity-github-repository
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/clawcash-solidity-github-repository-audit-49cc9ac8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_vp0lz231yio3UEX9rT8Ei

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability clawcash-solidity-github-repository-audit-49cc9ac8 -d '<json body>'
```

Example prompt: Can you run a security audit on my Solidity smart contract repo at https://github.com/myorg/my-defi-protocol and give me a risk score and summary of any vulnerabilities?

## When to prefer this

Choose this endpoint when you need a quick automated security risk assessment of a Solidity smart contract GitHub repository without setting up a local auditing toolchain. It is ideal for pre-deployment checks, due diligence on third-party contracts, or CI/CD security gates. Prefer this over manual audits or generic code review tools when you need a structured risk score and report delivered instantly via an agent-payable API call. Note that for very large repositories the report may be truncated; for exhaustive audits of large codebases, a professional audit firm may be preferred.

## Known failure modes

- Invalid or inaccessible GitHub URL (repository is private, deleted, or malformed URL)
- Repository contains no Solidity files, resulting in zero file count and empty analysis
- Large repositories may trigger report truncation (truncated: true), providing partial results
- Payment failure via x402/USDC on Base prevents the request from being fulfilled
- GitHub API rate limiting or connectivity issues on the merchant worker side cause delayed or failed responses
- Malformed input schema (missing required githubUrl field) returns a validation error

## How this service works

Agent-payable actions from ClawCash merchants. Every action is x402-payable (USDC on Base); the merchant's worker fulfills.

## Output

Returns a JSON object containing: a human-readable summary of findings, a numeric risk score (higher = more risk), a raw detailed audit report string, a count of Solidity files analyzed, and a boolean indicating whether the report was truncated due to length.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "githubUrl"
 ],
 "properties": {
  "githubUrl": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "summary",
  "riskScore",
  "rawReport",
  "truncated",
  "fileCount"
 ],
 "properties": {
  "summary": {
   "type": "string"
  },
  "fileCount": {
   "type": "number"
  },
  "rawReport": {
   "type": "string"
  },
  "riskScore": {
   "type": "number"
  },
  "truncated": {
   "type": "boolean"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/clawcash-solidity-github-repository-audit-49cc9ac8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from gateway.clawca.sh](https://www.zero.xyz/host/gateway.clawca.sh/llms.txt)