# skill-audit API – Batch Malicious Pattern Detection

> skill-audit API – Batch Malicious Pattern Detection is a paid API for AI agents from eltociear-skill-audit.hf.space, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-15).

Batch-analyzes AI agent skills and plugins to detect malicious patterns, prompt injection, or harmful behaviors using micropayments on Base.

## Facts

- Endpoint: POST https://eltociear-skill-audit.hf.space/read/batch
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/skill-audit-api-batch-malicious-pattern-detection-41a3716e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_X1F7uZ5oltKzy0z4X41b5

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability skill-audit-api-batch-malicious-pattern-detection-41a3716e -d '<json body>'
```

Example prompt: Can you run a security audit on these two agent plugins I'm about to install — check both of them in one batch for any malicious patterns, prompt injection, or dangerous instructions before I add them to my workflow?

## When to prefer this

Choose this endpoint when you need to screen multiple AI agent skills or plugins simultaneously for security threats, malicious instructions, or prompt injection in a single API call. Ideal for automated CI/CD pipelines, marketplace vetting workflows, or any scenario where an agent must evaluate the safety of third-party capabilities before integrating them. Prefer this over single-item checks when auditing more than one skill at once to minimize cost and latency.

## Known failure modes

- Payment not included or insufficient — x402 micropayment required per call on Base
- Malformed batch input — missing required URL or content fields returns an error
- Skill URL unreachable — cannot fetch content for analysis
- Rate limiting on Hugging Face Space backend
- Empty batch — submitting zero skills returns empty results
- Content too large — very long skill definitions may exceed processing limits

## How this service works

Fetch up to 10 URLs concurrently and return each as clean Markdown (bulk rate)

## Output

Returns a JSON object with an 'ok' count (number of successfully audited skills), a 'count' total, and a 'results' array where each item includes the skill URL, title, markdown content, word count, and presumably detected malicious pattern flags or safety annotations for that skill.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "urls": {
   "type": "array",
   "items": {
    "type": "string",
    "format": "uri"
   },
   "description": "1-10 pages to fetch and clean"
  },
  "include_links": {
   "type": "boolean",
   "description": "Keep hyperlinks (default true)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": 2,
  "count": 2,
  "results": [
   {
    "url": "https://example.com/a",
    "title": "A",
    "markdown": "# A…",
    "word_count": 120
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/skill-audit-api-batch-malicious-pattern-detection-41a3716e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from eltociear-skill-audit.hf.space](https://www.zero.xyz/host/eltociear-skill-audit.hf.space/llms.txt)