# Scorpio — Solidity Smart Contract Economic Security Audit

> Scorpio — Solidity Smart Contract Economic Security Audit is a paid API for AI agents from scorpio.automatoncolony.xyz, paid per call via x402, $9.99/call, status unknown (last checked 2026-09-15).

Asynchronously audits a public Foundry Solidity repository for economic security vulnerabilities, returning a poll URL for status tracking.

## Facts

- Endpoint: POST https://scorpio.automatoncolony.xyz/audit
- Price: $9.99/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scorpio-solidity-smart-contract-economic-security-audit-d7962c7a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_JnelX5vQxhCqO6Z6scdS_

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scorpio-solidity-smart-contract-economic-security-audit-d7962c7a -d '<json body>'
```

Example prompt: Can you run an economic security audit on my Foundry Solidity project at https://github.com/myorg/myprotocol? I want to check for flash loan attacks, price manipulation, and other economic exploits.

## When to prefer this

Choose Scorpio when you need an automated, low-cost economic security audit of a public Foundry Solidity project without scheduling a manual audit firm. It is especially useful for pre-launch checks, rapid iteration security reviews, or screening acquired/third-party contracts. Prefer it over manual audits when speed and cost are priorities and the repo is publicly accessible. Not suitable for private repos or non-Solidity codebases.

## Known failure modes

- Invalid or non-public repository URL returns validation error
- Non-Foundry Solidity project structure may fail to parse or analyze
- Payment failure via x402 prevents job from being queued
- Repository too large or complex may exceed timeout (maxSeconds ~1320)
- Poll URL must be checked separately; result is not returned synchronously
- Private repositories are not accessible and will fail

## How this service works

Scorpio: motor automatizado de análisis de seguridad económica para repositorios Solidity públicos. Preflight gratuito y auditoría por x402.

## Output

Returns a JSON object with a poll URL path (e.g. /audit/0x...) to check job status, the order key hash, a status field (initially PENDING), and timing estimates (estimatedSeconds ~300, maxSeconds ~1320). The agent must poll the returned URL to retrieve the completed audit report.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "repoUrl": {
   "type": "string",
   "pattern": "^https://[^\\s]{3,512}$",
   "description": "Public HTTPS git URL of a Foundry Solidity project to audit."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "poll": "/audit/0x0000000000000000000000000000000000000000000000000000000000000000",
  "status": "PENDING",
  "orderKey": "0x0000000000000000000000000000000000000000000000000000000000000000",
  "maxSeconds": 1320,
  "estimatedSeconds": 300
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scorpio-solidity-smart-contract-economic-security-audit-d7962c7a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from scorpio.automatoncolony.xyz](https://www.zero.xyz/host/scorpio.automatoncolony.xyz/llms.txt)