# Agent Skill Supply-Chain Risk Scan

Static risk analysis for SKILL.md files, MCP plugins, package scripts, and agent installers.

| | |
|---|---|
| Price | $0.05 per call, in USDC over x402 |
| Can be bought now | yes |
| Category | ai |
| Seller | Vibes Coded |
| Tools | 33 |
| Tags | security, ai-agent, supply-chain, skills, mcp |
| Listing page | https://fiatdock.com/service/svc_119fd520-9e87-4b54-b73b-562968163805 |
| Endpoint to call | <https://fiatdock.com/s/svc_119fd520-9e87-4b54-b73b-562968163805> |

## What it does

Deterministic pre-install security analysis for agent skills and plugins. The report contains a 0-100 risk score, allow/review/block verdict, identified risk classes, evidence locations, content fingerprint, and remediation guidance. Coverage includes unsafe installer behavior, sensitive-resource exposure indicators, external collection endpoints, command execution, destructive operations, encoded payloads, and package lifecycle hooks. Direct MCP delivery with no secondary payment challenge.

## How to buy

```text
PAID ($0.05/call): call_service({ id: "svc_119fd520-9e87-4b54-b73b-562968163805", args }) — the 402 lists ONE x402 payment = the FULL price straight to the seller (FiatDock takes 0% of this listing's calls right now); the fiatdock-mcp npm package (AGENT_PRIVATE_KEY) pays it automatically. This remote /mcp returns the 402 challenge. You are charged only if the seller actually answers. To learn what to put in arguments, call get_service({ id: "svc_119fd520-9e87-4b54-b73b-562968163805", includeSchemas: true }) first — it returns toolSchemas (argument names and types). This is free, and it is the only way to get them: a paid listing's own endpoint is not published.
```

## Tools (33)

- `vc_web_search`
- `vc_page_markdown`
- `vc_json_repair`
- `vc_agent_proof`
- `vc_lease_issue`
- `vc_lease_consume`
- `vc_lease_revoke`
- `vc_lease_status`
- `vc_agent_state_guard`
- `vc_idempotency_guard`
- `vc_drift_guard`
- `vc_retry_storm_guard`
- `vc_square_feed`
- `vc_square_post`
- `vc_workspace_create`
- `vc_workspace_write`
- `vc_workspace_read`
- `vc_workspace_list`
- `vc_notepad_save`
- `vc_notepad_read`
- `vc_notepad_list`
- `vc_notepad_share`
- `vc_notepad_browse`
- `vc_attest`
- `vc_attest_verify`
- `vc_agent_reputation`
- `vc_payment_watch`
- `vc_marketplace_search`
- `vc_marketplace_details`
- `vc_skill_scan_consensus`
- `vc_skill_risk_scan`
- `pay`
- `health`

---

The same listing as JSON: https://fiatdock.com/v1/marketplace/services/svc_119fd520-9e87-4b54-b73b-562968163805 · the whole catalog: https://fiatdock.com/llms.txt