{"slug":"seenly-skill-scan-vercel-app-api-scan-6eacd7","title":"Skill Scan by Agentropolis","host":"seenly-skill-scan.vercel.app","method":"POST","resource":"https://seenly-skill-scan.vercel.app/api/scan","category":"code","description":"Skill Scan by Agentropolis: static Consensus Scan of an MCP server or agent skill before you install it. Pass a GitHub repo, npm:/pypi: package or pasted code + tools/list/SKILL.md. Flags tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks; ","price_listed":0.3,"price_asked":0.3,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":616,"reported_calls_30d":0,"reported_payers_30d":0,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"context":"Connect to Claude Desktop to summarise my notes","repo":"https://github.com/owner/some-mcp-server"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"anyOf":[{"required":["repo"]},{"required":["files"]},{"required":["code"]},{"required":["manifest"]}],"properties":{"code":{"description":"Single pasted file (alternative to files).","type":"string"},"context":{"description":"Optional: what you plan to use the tool for (helps judge capability vs purpose).","maxLength":500,"type":"string"},"files":{"description":"Pasted source files (total <= 200,000 chars).","items":{"properties":{"content":{"type":"string"},"path":{"maxLength":300,"type":"string"}},"required":["content"],"type":"object"},"maxItems":60,"type":"array"},"manifest":{"description":"Optional: the server's tools/list result, {tools:[...]}, server.json, or SKILL.md text.","oneOf":[{"type":"object"},{"type":"array"},{"type":"string"}]},"repo":{"description":"Public source to scan: https://github.com/owner/repo (optionally /tree/<ref>/<path>), a /blob/ or raw.githubusercontent.com file URL, npm:<package>[@version] or pypi:<package>[==version] (sdist). Fetched read-only; never executed.","maxLength":500,"type":"string"},"requestKey":{"maxLength":128,"type":"string"}},"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"advisory":{"type":"boolean"},"agentropolis":{"type":"object"},"consensus":{"type":"object"},"findings":{"items":{"type":"object"},"type":"array"},"provenance":{"type":"object"},"recommendation":{"type":"string"},"risk":{"type":"number"},"summary":{"type":"string"},"tools":{"type":"object"},"verdict":{"enum":["allow","review","block"],"type":"string"}},"required":["verdict","risk","advisory"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-20","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.3,"price_match":true,"latency_ms":616,"error":null}],"description_full":"Skill Scan by Agentropolis: static Consensus Scan of an MCP server or agent skill before you install it. Pass a GitHub repo, npm:/pypi: package or pasted code + tools/list/SKILL.md. Flags tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks; 2 rule families + 2 LLM reviewers vote; cross-checks Agentropolis seller trust data. Returns allow/review/block with evidence. Read-only, never executes the code. Advisory.","last_updated":"2026-10-20T14:36:56.577Z","schemes":["exact"]}