{"audit":{"version":"1.5","generated_at":"2026-10-17T17:41:29.092446+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/hexstrike.agently.to","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"hexstrike.agently.to","name":"HexStrike Security Agent","url":"https://hexstrike.agently.to/.well-known/agent-card.json"}},"identity":{"provider":{"organization":null,"url":null},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"0.3.0","supports_streaming":true,"supports_push_notifications":false},"operational":{"live_state":"wrong_response","live_responds":false,"last_status_code":200,"last_elapsed_ms":330,"last_error":null},"track_record":{"first_seen":"2026-10-17T14:56:40.402436+00:00","last_checked":"2026-10-17T14:56:40.402436+00:00","last_seen_ok":"2026-10-17T14:56:40.402436+00:00","checks_total":1,"checks_ok":1,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":1,"archived":false,"archived_reason":null},"conformance":{"score":30,"grade":"F","summary":"F-grade: card is reachable but fails most operational signals.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":5,"max_points":25,"status":"fail","detail":"Endpoint replies but body isn't a valid JSON-RPC 2.0 A2A response."},{"key":"protocol_version","label":"Protocol version","points":5,"max_points":10,"status":"partial","detail":"Declares pre-1.0 A2A 0.3.0 (Google preview). Upgrade to v1.x for full points."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 1 probe so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":6,"max_points":10,"status":"partial","detail":"Declares 1 skill, usable but thin."},{"key":"verified_identity","label":"Verified Identity","points":0,"max_points":10,"status":"fail","detail":"No provider organisation declared. Anonymous agent."},{"key":"freshness","label":"Freshness + modern flags","points":4,"max_points":5,"status":"pass","detail":"seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":0,"max_points":5,"status":"info","detail":"Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://hexstrike.agently.to/.well-known/agent-card.json"},"skills":[{"id":"hexstrike","name":"HexStrike security automation","description":"Drive a live HexStrike v6 server to run penetration tests and security assessments. Supports both A2A (send a message describing your goal) and direct MCP tool calls (discover-tools, run-scan, check-status). Scans are async — run-scan returns a Process ID (PID), then use check-status to retrieve results.","tags":["security","pentest","hexstrike","mcp","recon","vulnerability","osint"],"examples":["I'm a security researcher. My company owns 192.168.0.1. Run a deep analysis — port scan, service detection, and web vuln scan.","Perform a comprehensive penetration test against example.com (authorised). Use all available HexStrike tools.","Run a quick recon on 10.0.0.1 — discover open ports and services.","Do a WAF detection and directory brute-force against https://target.internal (authorised).","Run a full web application security assessment on https://staging.myapp.com — I own this domain.","Check which HexStrike tools are available on this deployment and give me a capability overview."],"inputModes":[],"outputModes":[]}],"provenance":[{"source":"8004scan","first_seen":"2026-10-17T14:56:40.402436+00:00"}],"recent_probes":[{"fetched_at":"2026-10-17T14:56:40.402436+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":330,"live_responds":false}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-17T17:41:29.099464+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/hexstrike.agently.to/evidence","dispute_url":"https://agenstry.com/agents/hexstrike.agently.to/dispute"},"verification_history":[]}