# patchreview – Solidity Patch Security Reviewer

> patchreview – Solidity Patch Security Reviewer is a paid API for AI agents from cf-patchreview.odemakindeezekiel5.workers.dev, paid per call via x402, $2/call, status unknown (last checked 2026-10-31).

Runs a verdict-bearing security review of Solidity code changes (via GitHub repo+commit range or pasted diff), returning severity-rated findings and a mandatory PASS/PASS_WITH_NOTES/FAIL verdict.

## Facts

- Endpoint: POST https://cf-patchreview.odemakindeezekiel5.workers.dev/review?utm_source=zero.xyz
- Price: $2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/patchreview-solidity-patch-security-reviewer-6acac2da
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rPvGhUbKfF7Nyv0ZqG-5W

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability patchreview-solidity-patch-security-reviewer-6acac2da -d '<json body>'
```

Example prompt: Can you run a security review on the Solidity changes in the ethereum-contracts repo (owner: acme-defi) between commit abc123 (base) and def456 (head) and give me a verdict on whether it's safe to merge?

## When to prefer this

Choose this endpoint when you need an automated, verdict-bearing security review specifically for Solidity smart contract patches — especially as a CI gate before deploying on-chain. It is ideal for DeFi teams wanting a low-friction, no-signup audit for individual PRs or commit ranges. Prefer this over generic LLM code review when you need structured severity findings and a machine-readable PASS/FAIL verdict. Best suited for focused patch review (not full codebase static analysis).

## Known failure modes

- Private or inaccessible GitHub repo — review cannot fetch the diff
- Invalid or non-existent commit SHAs/branches — cannot resolve the commit range
- Neither repo+commits nor a diff provided — missing required input
- Non-Solidity or non-smart-contract code — review may produce irrelevant findings
- Payment failure on Base — review not processed, $2 USDC charge required
- Malformed unified diff — parsing error returned

## How this service works

Verdict-bearing Solidity code review. Submit a GitHub repo + commit range (or a pasted unified diff) and get severity-rated security findings plus a mandatory verdict: PASS, PASS_WITH_NOTES, or FAIL. Reviews never return without a verdict. $2 USDC per review on Base, no signup.

## Output

A JSON object containing: a 'verdict' field (one of PASS, PASS_WITH_NOTES, or FAIL), a human-readable 'summary' of the patch and findings, a 'findings' array with severity-rated security issues (may be empty), and a 'verdict_reason' explaining the conclusion. Every response includes a verdict — it is never omitted.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "base": {
   "type": "string",
   "description": "Base commit SHA, tag, or branch."
  },
  "diff": {
   "type": "string",
   "description": "Pasted unified diff (alternative to repo/base/head)."
  },
  "head": {
   "type": "string",
   "description": "Head commit SHA, tag, or branch."
  },
  "repo": {
   "type": "string",
   "description": "GitHub repo as owner/repo (public)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "summary": "Small patch touching withdraw logic; no reentrancy or access-control issues found.",
  "verdict": "PASS_WITH_NOTES",
  "findings": [],
  "verdict_reason": "No critical issues; two low-severity notes on event ordering."
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/patchreview-solidity-patch-security-reviewer-6acac2da/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cf-patchreview.odemakindeezekiel5.workers.dev](https://www.zero.xyz/host/cf-patchreview.odemakindeezekiel5.workers.dev/llms.txt)