https://agent.pocket.network/v1/taint-check
Scan a dependency manifest for known-vulnerable and confirmed-malicious packages. POST /v1/scan with a link to a lockfile on GitHub, GitLab or Bitbucket, the file pasted in, or a components array, and get per-dependency verdicts (malicious, vulnerable, suspicious, clean) from OSV.dev and the OpenSSF Malicious Packages feed. Pay per request in USDC; no account, no API key.
What this profile is sourced from
Raw HTTP — what an agent observes
GET https://agent.pocket.network/v1/taint-check → HTTP/1.1 402 Payment Required X-Payment-Required: $0.0050 X-Payment-Currency: USDC X-Payment-Chain: base GET https://agent.pocket.network/v1/taint-check X-Payment: <signed-receipt> → HTTP/1.1 200 OK Content-Type: application/json …response body…
Things to know before drawing strong conclusions
accepts[] entry is used.