agent-skill-risk-scan git:20260825.b36e463A

Immutable. This exact content is served forever at /api/v1/blob/34fd47cb4be5c90f.

---
name: agent-skill-risk-scan
description: Use before installing an untrusted SKILL.md, MCP plugin, package script, or agent installer. Buys a deterministic supply-chain risk report for $0.05 USDC through FiatDock.
---

# Agent Skill Supply-Chain Risk Scan

Run this gate **before** installing or executing third-party agent skills, MCP plugins, package lifecycle scripts, or copied setup commands.

## What it detects

- downloaded content piped into a shell
- private-key and credential-file references
- secret-bearing environment-variable access
- known external collection endpoints
- operating-system command execution
- destructive filesystem operations
- encoded payload execution
- automatic package lifecycle hooks

The result includes a 0–100 risk score, `allow` / `review` / `block` verdict, triggered rule IDs, evidence locations, SHA-256 content fingerprint, and remediation guidance.

> This is deterministic static analysis. An `allow` result is not proof of provenance or safety.

## Paid call

Service listing: `https://fiatdock.com/s/svc_119fd520-9e87-4b54-b73b-562968163805`

Price: **$0.05 USDC per scan on Base**. FiatDock settles only after the seller returns an answer. A delivery failure is not charged unless the response explicitly contains a `settled` array.

Request a payment quote by posting the complete text as `content`:

```bash
curl -sS -X POST \
  https://fiatdock.com/s/svc_119fd520-9e87-4b54-b73b-562968163805 \
  -H 'Content-Type: application/json' \
  -d '{"content":"PASTE THE COMPLETE SKILL OR PLUGIN TEXT HERE"}'
```

The initial response is HTTP `402` and its `accepts` array lists every payment leg. Nothing is charged by the quote.

After signing each required Base USDC payment authorization, retry the identical request with `PAYMENT-SIGNATURE`. FiatDock x402 v2 expects a base64-encoded JSON **array**, one signed payload per accepted leg:

```bash
curl -sS -X POST \
  https://fiatdock.com/s/svc_119fd520-9e87-4b54-b73b-562968163805 \
  -H 'Content-Type: application/json' \
  -H 'PAYMENT-SIGNATURE: BASE64_JSON_ARRAY_OF_SIGNED_PAYLOADS' \
  -d '{"content":"PASTE THE COMPLETE SKILL OR PLUGIN TEXT HERE"}'
```

## Decision policy

- `block`: do not install or execute; resolve every critical/high finding.
- `review`: require human review and isolate execution.
- `allow`: no known high-risk pattern matched; still verify source, signature, and publisher identity.

Never expose an unrelated secret merely to scan a skill. Scan the skill/plugin text itself.