Skip to content

crosscheck skillcheck · crosscheckapi.com

Security scan of an AI agent skill or MCP server before install: a…

Security scan of an AI agent skill or MCP server before install: a malware and prompt injection audit of its files (read, never run). Finds downloads piped to a shell, credential and wallet theft, secrets sent over the network, persistence, hidden Unicode, and instructions aimed at the agent or the scanner. Supply-chain check with a signed receipt keyed to the file hashes; bundles already scanned are free to look up. $0.03.

Ready now5 calls · 1 buyer in 30 days

Input

A single SKILL.md, instead of files
Files
The skill or server's text files, exactly as they would be installed
files-1
files-2

Sample response

Published by the provider. Your run returns a fresh response.

response7 keys
job_id"chk_3a1f0c9e8d7b6a5f4e3d2c1b0a9f8e7d"
receipt3 keys
hash"…"
sig"…"
result_token"…"
result_url"https://crosscheckapi.com/v1/checks/chk_3a1f0c9e8d7b6a5f4e3d2c1b0a9f8e7d"
share_url"https://crosscheckapi.com/r/…"
status"done"
verdict8 keys
bundle_sha256"…"
declared_purpose"Get the weather for a city."
files_scanned2
note"This scan reads the files you sent and does not run them. No findings does not mean safe."
result"findings"
risk"high"
summary"1 finding, highest high. First: Downloads code and runs it immediately, so whoever controls that URL controls the machine."
responseobject, 7 keys
Your agent can do this on its own
Add the MCP URL in Claude Code, Cursor or Codex. Your agent can run Tools within its spending limits, or ask for approval each time. Connect your agent

Connect your agent

Add one MCP URL and your agent can find and run this tool within its spending limits. Choose “Ask each time” if you want to approve every Call.

MCP URL

https://app.aecon.ai/mcp
Terminalbash
claude mcp add --transport http --scope user agentic-economy "https://app.aecon.ai/mcp"

In Claude Code, open /mcp, select agentic-economy, then choose Authenticate.

Track record

Paid calls, last 30 days
5
Buyers, last 30 days
1
Last paid call

Reported by the x402 directory.

A$0.043 per call