# TrollBridge Audit-Prep — EVM Contract Pre-Audit Static Analysis

> TrollBridge Audit-Prep — EVM Contract Pre-Audit Static Analysis is a paid API for AI agents from mini-tollbooth.onrender.com, paid per call via x402, $1/call, status unknown (last checked 2026-10-12).

Runs a deterministic static analysis battery on an EVM smart contract and returns risk findings plus adversarial review prompts to accelerate human audits

## Facts

- Endpoint: GET https://mini-tollbooth.onrender.com/audit-prep?utm_source=zero.xyz
- Price: $1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/trollbridge-audit-prep-evm-contract-pre-audit-static-analysis-dff111dc
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__iXb_Zl_qAN9QSr4q-O-R

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability trollbridge-audit-prep-evm-contract-pre-audit-static-analysis-dff111dc
```

Example prompt: Run a pre-audit static analysis on the contract at 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 on Base — I want a risk score, all the vulnerability findings, and the adversarial review prompts so I can hand this to an auditor faster.

## When to prefer this

Use this endpoint when you need a quick, deterministic static security analysis of an EVM smart contract before commissioning a full human audit, or when you want adversarial prompts to guide your own model-based review. It covers reentrancy, access control, tx.origin, delegatecall, selfdestruct, initializers, proxy/upgradeability, OpenZeppelin drift, and centralization risks in a single call. Prefer this over manual code review tools when you need a structured risk score and machine-readable findings for Base or Ethereum contracts. Do NOT use this as a replacement for a professional audit — it is explicitly designed to make audits faster and cheaper, not to substitute for one.

## Known failure modes

- Invalid or malformed contract address (not a valid 0x EVM address) — likely returns an error or empty findings
- Unsupported chain value — only 'base' and 'ethereum' are accepted; other values may return an error
- Contract not deployed or unverified source — verified flag will be false, static analysis may be limited
- Payment not received or insufficient USDC — x402 payment gate will reject the request
- Contract too large or complex for static battery — may timeout or return partial results
- Network/RPC issues on the specified chain — may return a service error

## How this service works

The insurance booth for AI agents, with Mini's Agent Supply Store on the side of the road. One hundred checkpoints: pre-transaction safety lanes (honeypot, approval-risk, rug-score, receipt-check, tx-dryrun, permit-scan, airdrop-verdict, deployer-history, wallet-watch, secret-scan at $0.02 USDC per call; the protection tier — /contract-check, /approval-screen, /tx-plain-english, /honeypot-check, /tx-simulate, /redteam, /skill-scan, /verdict, /egress-audit, /tool-gate, /airlock, /repo-scan, /prove, /task-scope — at $0.10; the one-call /shield don't-get-rugged screen at $0.25; the full /preflight bundle at $0.05), bounty intel (bounties, fresh, verdicts, deadlines, sweepstakes, opportunities) at $0.02 USDC per call, trader intel (/prices and /quant at $0.02; /enrich and /token-check at $0.05; /contract-check and /honeypot-check at $0.10; /sec-facts at $0.05), market intel (/markets and /search at $0.05; /grants at $0.02), DeFi intel (/yields and /new-pairs at $0.05; /gas and /defi at $0.02), AI intel (/models at $0.02), agent-ops intel (/prompt-cost, /model-picks, /rpc-speed, /terms-tldr, /scrape, /gigs, /retry-verify, /idempotency, /verify-independent at $0.02; /site-watch, /wallet-check, /code-run, /regulatory-pack, /sage, /cron-watch, /caveat-check, /tripwire, /escrow, /trust, /bridge-fees, /dao-votes, /dev-activity, /dex-arb, /dydx-perps, /funding-rates, /gas-predict, /hack-tracker, /long-short-ratio, /lp-yields, /mev-scan, /open-interest, /perp-basis, /polymarket-odds, /rwa-watch, /sentiment, /stablecoin-flows, /tokenomics, /top-movers, /whale-watch, and /yield-stable at $0.05; /approval-screen, /tx-plain-english, /tx-simulate, and /task-scope at $0.10; /scam-scan deep scan at $5.00 or 30-day subscription at $30.00), supply store (/road-pack combo meal at $0.05; curated datasets, the /audit-prep pre-audit review, and the /prove-state symbolic-execution run at $1.00; the /audit AI-agent audit at $25.00). Every lane answers before money moves — heuristic verdicts, not audits. Don't get rugged.

## Output

Returns a JSON object with: lane identifier (/audit-prep), risk level string (e.g. 'medium'), chain, contract address, a WARNING that this is NOT_AN_AUDIT, an array of findings each with a code/title/severity, a verified boolean (whether source was found on Sourcify), a numeric risk_score (0-100), a human-readable description of the analysis, and an array of three adversarial swarm_prompts ('the_attacker', 'the_economist', 'the_pedant') to guide further model-based review.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "chain": {
       "type": "string",
       "description": "Chain: base or ethereum."
      },
      "address": {
       "type": "string",
       "description": "EVM contract address (0x…, 40 hex chars)."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "lane": "/audit-prep",
  "risk": "medium",
  "chain": "base",
  "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
  "warning": "NOT_AN_AUDIT",
  "findings": [
   {
    "code": "upgradeable-proxy",
    "title": "…",
    "severity": "medium"
   }
  ],
  "verified": true,
  "risk_score": 45,
  "description": "Automated pre-audit review for EVM contracts ($1.00) — verified source from Sourcify, deterministic static battery (reentrancy, access control, tx.origin, delegatecall, selfdestruct, initializers, proxy/upgradeability, OpenZeppelin drift, centralization), plus three adversarial review prompts for your own model. NOT AN AUDIT — makes a human audit faster/cheaper, does not replace one.",
  "swarm_prompts": [
   "the_attacker",
   "the_economist",
   "the_pedant"
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/trollbridge-audit-prep-evm-contract-pre-audit-static-analysis-dff111dc/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from mini-tollbooth.onrender.com](https://www.zero.xyz/host/mini-tollbooth.onrender.com/llms.txt)