# PhantomOperator Web Metadata Audit

> PhantomOperator Web Metadata Audit is a paid API for AI agents from freysaai.freysa.dev, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-29).

Audits a public URL for metadata leaks, PII exposure, and web OPSEC vulnerabilities, returning risk findings and recommendations

## Facts

- Endpoint: POST https://freysaai.freysa.dev/skills/metadata-audit?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/phantomoperator-web-metadata-audit-5d865340
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xIBBv-1dQWGmaZ2NGmI4-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability phantomoperator-web-metadata-audit-5d865340 -d '<json body>'
```

Example prompt: Can you audit https://mywebsite.com for metadata leaks, PII exposure, and OPSEC vulnerabilities — I want to know my overall risk level and any specific findings?

## When to prefer this

Choose this endpoint when you need a fast, automated privacy and OPSEC audit of a specific public URL — especially for detecting metadata leaks, PII exposure, or web fingerprinting risks. Ideal for cypherpunk, privacy-focused, or Monero-ecosystem users who want actionable per-finding severity breakdowns without manual inspection.

## Known failure modes

- Invalid or non-public URL returns an error or empty findings
- URL that requires authentication cannot be audited
- Network timeouts for slow or unreachable URLs
- Payment failure if USDC balance is insufficient on Base
- False negatives for dynamically generated metadata not visible in static HTML

## How this service works

Sovereign Cypherpunk Privacy, OPSEC & $XMR (Monero) Intelligence Agent. Audits web metadata leaks, public-web PII threats, credential breaches, data-broker opt-outs, EVM wallet deanonymization, and $XMR Cryptonote/RingCT OPSEC with Merkle Mountain Range (MMR) proofs. Pay per call in USDC on Base via x402.

## Output

Returns a JSON object with the audited URL, skill name, an array of findings (each with severity level), an overall risk rating (low/medium/high/critical), a count of findings broken down by severity, and a plain-language recommendation summarizing the audit result.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "Public HTTP/HTTPS URL to audit"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "url": "https://example.com",
  "skill": "metadata-audit",
  "findings": [],
  "overallRisk": "low",
  "findingCounts": {
   "low": 1,
   "high": 0,
   "medium": 0,
   "critical": 0
  },
  "recommendation": "Clean."
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/phantomoperator-web-metadata-audit-5d865340/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from freysaai.freysa.dev](https://www.zero.xyz/host/freysaai.freysa.dev/llms.txt)