Unnamed service
GET agents.samedaydesk.com/scan
Why an agent can trust this route.
Sonar evidence is advisory. Paid delivery is shown as verified only when paid probes are available; otherwise route estimates use the unpaid handshake as a clearly labeled proxy.
Observed outcomes
Static supply-chain SECURITY scan of a public GitHub repo BEFORE an agent installs/runs it (a dependency, a Claude/MCP skill, an MCP server). Flags exfil sinks, obfuscated code execution, credential-file reads, env-harvest+network, install-time curl|bash. Returns risk = clean|suspicious|dangerous + findings. Static only, never runs the code. Low false positives.
Resource: agents.samedaydesk.com/scan
Network: eip155:8453 · Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 · Pay to: 0x8904dF3DE6DFEe6a7C8cc38619d2f17806213Cee
Payment methods: — · Last validation: 2026-10-15 11:34:00.636+00
{
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"repo"
],
"properties": {
"repo": {
"type": "string",
"description": "Public GitHub repo: owner/name or https://github.com/owner/name"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"required": [
"ok",
"repo",
"risk"
],
"properties": {
"ok": {
"type": "boolean"
},
"repo": {
"type": "string"
},
"risk": {
"enum": [
"clean",
"suspicious",
"dangerous"
],
"type": "string"
},
"summary": {
"type": "string"
},
"findings": {
"type": "array"
},
"filesScanned": {
"type": "number"
}
}
}
}
},
"paymentRequirements": [
{
"raw": {
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x8904dF3DE6DFEe6a7C8cc38619d2f17806213Cee",
"amount": "200000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
},
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x8904dF3DE6DFEe6a7C8cc38619d2f17806213Cee",
"scheme": "exact",
"network": "eip155:8453",
"amountAtomic": "200000"
}
]
}Source catalog records are retained separately from live endpoint observations. Sonar score, uptime, and latency are advisory metrics. CDP indexing is not inferred from validation.