81trust / 100

Skill Contract Audit

by Skill: Contract audit in Onchain & crypto

x402 APIPassing, checked 1 h ago

Triage a smart contract before an agent interacts with it: verified Solidity source, heuristic vulnerability scan, known-address check, function-selector resolution, and a read-only dry-run of the exact call you plan to make. Contract audit skill pack: one x402 payment runs 5 underlying tools (contract-source, solidity-scan, selector-lookup, address-label, tx-simulate); partial-success per step.

POST https://agent402.tools/api/skill/contract-audit

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
193 ms typical, 193 ms slowest 5%
Last check
1 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X POST "https://agent402.tools/api/skill/contract-audit" \
  -H "content-type: application/json" \
  -d '{"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","data":"0x70a08231000000000000000000000000abf4fabd7c416fb67202e5f9002389fc75e2a9d0","network":"base"}'
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fagent402.tools%2Fapi%2Fskill%2Fcontract-audit
const res = await pay("https://agent402.tools/api/skill/contract-audit", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","data":"0x70a08231000000000000000000000000abf4fabd7c416fb67202e5f9002389fc75e2a9d0","network":"base"}),
});
console.log(await res.json());

Example input

{
  "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
  "data": "0x70a08231000000000000000000000000abf4fabd7c416fb67202e5f9002389fc75e2a9d0",
  "network": "base"
}

Example output

{
  "args": {
    "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "data": "0x70a08231000000000000000000000000abf4fabd7c416fb67202e5f9002389fc75e2a9d0",
    "network": "base"
  },
  "pack": "contract-audit",
  "steps": [
    {
      "ok": true,
      "result": {},
      "slug": "contract-source"
    },
    {
      "ok": true,
      "result": {},
      "slug": "solidity-scan"
    },
    {
      "ok": true,
      "result": {},
      "slug": "selector-lookup"
    },
    {
      "ok": true,
      "result": {},
      "slug": "address-label"
    },
    {
      "ok": true,
      "result": {},
      "slug": "tx-simulate"
    }
  ],
  "summary": "5/5 steps succeeded"
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
1 h agoPassed402190 ms$0.022
5 h agoPassed402193 ms$0.022
10 h agoPassed402249 ms$0.022