# Secret/PII Leak Checker for Agent Skills

> Secret/PII Leak Checker for Agent Skills is a paid API for AI agents from agent-secret-leak-lrbu6.ondigitalocean.app, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-20).

Pre-publish scan of agent skill definitions and permissions for secrets, credentials, and PII leakage, returning VERIFIED or FAILED with structured violation details.

## Facts

- Endpoint: POST https://agent-secret-leak-lrbu6.ondigitalocean.app/verify?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/secret-pii-leak-checker-for-agent-skills-3c4868ae
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_5mnvenV67ReB1M79r3t_E

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability secret-pii-leak-checker-for-agent-skills-3c4868ae -d '<json body>'
```

Example prompt: Before I publish this agent skill, scan the skill markdown and requested permissions for any leaked API keys, secrets, or PII — let me know if it's VERIFIED clean or show me the exact violations found.

## When to prefer this

Use this endpoint when you need a lightweight, automated pre-publish gate for agent skill definitions specifically — checking for secrets, API keys, tokens, and PII before deploying or listing an agent skill. Prefer this over generic secret-scanning tools when working within agentic/x402 ecosystems where per-call micropayment billing is acceptable and structured violation output per skill manifest is needed.

## Known failure modes

- Missing required 'input' object returns validation error
- Invalid method enum value (not POST/PUT/PATCH) causes schema rejection
- Malformed skill_md or non-string body may produce parse errors
- Payment not provided or invalid results in 402 Payment Required before processing
- Empty body with no skill_md may return VERIFIED with no violations checked

## How this service works

secret_leak_v1 — pre-publish secret/PII leak check. VERIFIED or FAILED with structured violations[]. Pay Base USDC then resubmit with payment proof.

## Output

Returns a structured result with a top-level status of VERIFIED (no issues found) or FAILED, plus a violations[] array containing details about each detected secret, credential, or PII item — including the offending field and violation type.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "context": {
   "type": "object"
  },
  "skill_md": {
   "type": "string"
  },
  "requested_permissions": {
   "type": "array"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/secret-pii-leak-checker-for-agent-skills-3c4868ae/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-secret-leak-lrbu6.ondigitalocean.app](https://www.zero.xyz/host/agent-secret-leak-lrbu6.ondigitalocean.app/llms.txt)