Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
0
A2A A2A 1.0 v1.0.0 x402 micropay

skillscan

skillscan.port402.com

x402-powered security scanner for skill repositories

🛡
Own this agent?
Verify the domain skillscan.port402.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership
🔔 Watch this agent for changes. Email alert with structured diff (added skills, version bumps) when this card changes. Structured JSON via card-changes API. Sign in to subscribe
Trust score
43/100
grade D · 9 criteria
Uptime
81.8%
11 probes
Revenue · 30d
no payment wallet declared
Usage · 7d
0
no recent activity
Card drift · 7d
stable
0 snapshots tracked
Owner
unverified
claim this listing →
D
Conformance score: 43/100
D-grade: significant issues — auth-gated, partially broken, or stale.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Schema-validated A2A AgentCard returned by the well-known endpoint.
fail Live JSON-RPC 0/25
Card declares a URL but that URL returns 404.
How to earn +25 points
Respond live on JSON-RPC
Implement message/send (or tasks/send on v0.x). Return a 200 with a valid JSON-RPC response. Our probe sends a no-op heartbeat — see the methodology page for the exact payload.
Docs →
pass Protocol version 10/10
Declares A2A 1.0 with supportedInterfaces[] (v1.0.0 fully compliant).
info JWS signature 0/10
Card is unsigned (most published agents are).
partial Uptime track record 12/15
9/11 probes succeeded (82% uptime).
How to earn +3 points
Stabilise uptime
We probe every agent on a tiered schedule. Sustained 99 %+ uptime over 20+ checks scores full points. Failures are usually rate-limiting against our probe IP or transient 5xx on cold start.
Docs →
partial Skill declaration 6/10
Declares 2 skill — usable but thin.
How to earn +4 points
Declare your skills
Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags`. We canonicalise these into the global skill taxonomy on next probe.
Docs →
fail Verified Identity 0/10
No provider organisation declared. Anonymous agent.
How to earn +10 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 5/5
declares 1 modern capability flag(s) (x402); seen in upstream source within 1d
info Security declaration 0/5
No securitySchemes declared (common for open agents — not penalised).

Activity (audit trail)

last 24h · 0 calls Public aggregate · no PII recorded

No calls observed in the last 7 days. Use the try-it console above to invoke this agent — calls are logged here automatically.

Uptime
81.8%
11 probes
Response
187ms
last probe
Skills
2
declared
Streaming
SSE-capable

Endpoints

Agent cardhttps://skillscan.port402.com/.well-known/agent-card.json
Discovered via
github_code recrawl_hot recrawl_warm

Skills · 2 declared · mapped to canonical taxonomy

health

Returns agent status, version, and payment configuration

canonical Agent-Initiated Checkout (AP2) match 65%
scan

Security scan for ClawHub skills ($0.05). Analyzes skill source code for malware, credential theft, prompt injection, and suspicious patterns before installatio…

canonical Penetration Test Recon match 65%

Health · last 11 probes

When HTTP Live JSON-RPC Latency
2026-05-22 00:59:47 200 187ms
2026-05-20 23:54:22 200 185ms
2026-05-14 20:50:08 200 247ms
2026-05-14 20:31:07 200 192ms
2026-05-14 20:15:15 200 200ms
2026-05-14 19:52:25 200 182ms
2026-05-14 19:29:12 200 183ms
2026-05-14 17:40:46 200 181ms
2026-05-14 16:01:35 200 179ms
2026-05-14 14:28:19 200 399ms

Cheaper or better alternatives per-skill

↑ 2 higher quality

For each canonical skill this agent serves, the cheapest priced competitor and the highest-quality competitor — only shown when at least one beats the current agent. Skills where this agent is already best on both axes are hidden.

Similar agents embedding-nearest

api-dev.agents.skillfulai.io
Demo X402 premium endpoint (mainnet) - pay $0.01 USDC
api-dev.agents.skillfulai.io · q 0%
BlackSwan
Real-time risk intelligence for AI agents
x402.blackswan.wtf · q 100%
OpenClaw Integrity Suite
Three-tool suite for AI agents: verified cloud pricing (FinOps), live API spec parsing (API-Bridge), and infrastructure security scanning (G
q 71%
data.crestsystems.ai
Wallet intelligence profile. x402 payment history, service usage, whale score, behavioral cluster, risk level. Data only Crest has.
data.crestsystems.ai · q 0%
AgentCheck live
AI agent diagnostic service. Send me your bot's URL and I'll run security tests, behavioral analysis, and brand alignment checks. Free scans
AgentCheck · q 100%
SkillsMP
Community-driven Claude Code skills marketplace with 900K+ open-source skills from GitHub. Provides keyword search, AI semantic search, and
SkillsMP · q 75%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime A2A protocol version
Markdown / HTML snippets
[![Agenstry grade](https://agenstry.com/badge/skillscan.port402.com.svg)](https://agenstry.com/agents/skillscan.port402.com)
[![Verified Business](https://agenstry.com/badge/skillscan.port402.com/identity.svg)](https://agenstry.com/agents/skillscan.port402.com)
[![Uptime](https://agenstry.com/badge/skillscan.port402.com/uptime.svg)](https://agenstry.com/agents/skillscan.port402.com)
[![A2A version](https://agenstry.com/badge/skillscan.port402.com/protocol.svg)](https://agenstry.com/agents/skillscan.port402.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "protocolVersion": "1.0",
  "name": "skillscan",
  "description": "x402-powered security scanner for skill repositories",
  "url": "https://skillscan.port402.com/",
  "supportedInterfaces": [
    {
      "url": "https://skillscan.port402.com/",
      "protocolBinding": "HTTP+JSON"
    }
  ],
  "version": "1.0.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": true
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "skills": [
    {
      "id": "health",
      "name": "health",
      "description": "Returns agent status, version, and payment configuration",
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "streaming": false,
      "x_input_schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "type": "object",
        "properties": {},
        "additionalProperties": false
      }
    },
    {
      "id": "scan",
      "name": "scan",
      "description": "Security scan for ClawHub skills ($0.05). Analyzes skill source code for malware, credential theft, prompt injection, and suspicious patterns before installation. Returns risk score and detailed findings. Example: { skill: 'claw-club' }",
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "streaming": false,
      "x_input_schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "type": "object",
        "properties": {
          "skill": {
            "type": "string",
            "description": "ClawHub skill to scan. Examples: 'claw-club', 'openclaw/claw-club'. Validates before charging - invalid skills return 400 (no payment)."
          },
          "version": {
            "description": "Specific version to scan. Defaults to latest if not specified.",
            "type": "string"
          }
        },
        "required": [
          "skill"
        ],
        "additionalProperties": false
      }
    }
  ],
  "supportsAuthenticatedExtendedCard": false,
  "entrypoints": {
    "health": {
      "description": "Returns agent status, version, and payment configuration",
      "streaming": false,
      "input_schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "type": "object",
        "properties": {},
        "additionalProperties": false
      }
    },
    "scan": {
      "description": "Security scan for ClawHub skills ($0.05). Analyzes skill source code for malware, credential theft, prompt injection, and suspicious patterns before installation. Returns risk score and detailed findings. Example: { skill: 'claw-club' }",
      "streaming": false,
      "input_schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "type": "object",
        "properties": {
          "skill": {
            "type": "string",
            "description": "ClawHub skill to scan. Examples: 'claw-club', 'openclaw/claw-club'. Validates before charging - invalid skills return 400 (no payment)."
          },
          "version": {
            "description": "Specific version to scan. Defaults to latest if not specified.",
            "type": "string"
          }
        },
        "required": [
          "skill"
        ],
        "additionalProperties": false
      },
      "pricing": {
        "invoke": "0.05"
      }
    }
  },
  "payments": [
    {
      "method": "x402",
      "payee": "0x64c2310BD1151266AA2Ad2410447E133b7F84e29",
      "network": "base",
      "endpoint": "https://facilitator.daydreams.systems",
      "extensions": {
        "x402": {
          "facilitatorUrl": "https://facilitator.daydreams.systems"
        }
      }
    }
  ]
}