{"audit":{"version":"1.5","generated_at":"2026-10-13T00:50:56.605684+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/depmoor.cybermaxtools.com","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"depmoor.cybermaxtools.com","name":"Depmoor by CyberMax","url":"https://depmoor.cybermaxtools.com/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"CyberMax","url":"https://cybermaxtools.com"},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"0.3.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"no_url","live_responds":null,"last_status_code":200,"last_elapsed_ms":185,"last_error":null},"track_record":{"first_seen":"2026-10-11T20:31:29.409565+00:00","last_checked":"2026-10-12T23:37:02.435617+00:00","last_seen_ok":"2026-10-12T23:37:02.435617+00:00","checks_total":6,"checks_ok":6,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":3,"archived":false,"archived_reason":null},"conformance":{"score":42,"grade":"D","summary":"D-grade: significant issues, auth-gated, partially broken, or stale.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":10,"max_points":25,"status":"partial","detail":"Card declares only gRPC / HTTP+JSON interfaces; the live probe covers JSON-RPC, so the endpoint was not exercised. Not a defect in the card."},{"key":"protocol_version","label":"Protocol version","points":5,"max_points":10,"status":"partial","detail":"Declares pre-1.0 A2A 0.3.0 (Google preview). Upgrade to v1.x for full points."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 3 probes so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":6,"max_points":10,"status":"partial","detail":"Declares 2 skill, usable but thin."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: CyberMax (https://cybermaxtools.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":4,"max_points":5,"status":"pass","detail":"seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":2,"max_points":5,"status":"partial","detail":"Declares 2 security scheme(s) but none use PKCE or mTLS."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://depmoor.cybermaxtools.com/.well-known/agent-card.json"},"skills":[{"id":"scan_dependencies","name":"Scan a lockfile for exploitable vulnerabilities","description":"POST /api/scan[?format=json|sarif|csv|md] with JSON {\"filename\",\"lockfile\"} or {\"packages\":[{\"ecosystem\",\"name\",\"version\"}]}, or the raw lockfile with ?filename=. Returns findings ranked by KEV status and EPSS. Needs a Pro/Team key (daily scan caps per plan).","tags":["sca","vulnerability scanner","lockfile","cisa kev","epss","sarif"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"cisa_kev","name":"CISA Known Exploited Vulnerabilities catalogue","description":"GET /api/kev returns the CISA KEV catalogue in compact JSON with CORS enabled, cached for 1 hour. Free, no key.","tags":["sca","vulnerability scanner","lockfile","cisa kev","epss","sarif"],"examples":["https://depmoor.cybermaxtools.com/api/kev"],"inputModes":["application/json"],"outputModes":["application/json"]}],"provenance":[{"source":"a2aregistry","first_seen":"2026-10-11T20:31:29.409565+00:00"},{"source":"registry","first_seen":"2026-10-11T22:29:00.119709+00:00"}],"recent_probes":[{"fetched_at":"2026-10-12T23:37:02.435617+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":185,"live_responds":null},{"fetched_at":"2026-10-12T05:29:35.122246+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":82,"live_responds":null},{"fetched_at":"2026-10-11T22:29:00.119709+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":23,"live_responds":null}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-13T00:50:56.683107+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/depmoor.cybermaxtools.com/evidence","dispute_url":"https://agenstry.com/agents/depmoor.cybermaxtools.com/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"bumbgKxY-47RzPJvURb-pk-SsQXrSYGLwlLa8JdSfI9qTCULDr_PSfW19RSF6ULYI1vGKGP1iEFasNR8SZp9Wg"}]}