GitHub Security & Secret Audit (MPP) (x402)

https://github-audit.agentdiet.dev/v1/execute?protocol=mpp
x402 · HTTP Base in catalog since Oct 28
18
of 100
flagged
Tool descriptions contain instructions to the agent

Security audit detected prompt injection in tool descriptions: [financial_raw_evm_address: "0xec5275d5b03bc390fca63d902d0b2d0db2eb5573"]. These directives may attempt to hijack your agent's behavior.

Availability 50
Weight 30% · 7-day uptime
Honesty 0
Weight 30% · price match
Safety 0
Weight 25% · prompt injection
Maturity 20
Weight 15% · longevity

Service Metadata

Host
Listed Price
$0.010000
Payee (Catalog)
—
30-day Unique Payers
0 buyers
First Seen
2026-10-28
Last Diagnostic Run
2026-11-01 09:02 UTC
Discovered via
402index
Embed Badge

Diagnostic Runs

pass fail skipped
Oct 30 · 00:31
reach 1.6s challenge price payto injection
details ↓
challenge Incomplete 402 challenge: payTo=false, network=false, amount=false
price Skipped: missing catalog price or 402 payment info
payto Skipped: missing catalog payTo or 402 payment info
reach HTTP 402 · 1580 ms · raw response
Oct 29 · 00:28
reach 1.5s challenge price payto injection
details →
Oct 29 · 21:44
reach 2.1s challenge price payto injection
details →

Community

0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.

· sign in with email to vote

For your agent

$ curl https://capkey.dev/api/v1/score?url=github-audit.agentdiet.dev/v1/execute?protocol=mpp
{ "total": 18, "badge": "flagged",
  "verdict": "tool_descriptions_contain_inst", "checked_at": "2026-11-01T09:02:24.097Z" }