ai-cloud-studio/apishield-waf-prompt-firewall-sdk · v1.0.0
What an agent reads when it fetches this URL: the whole manifest, in order, with the offer on the last line as a 402 it can pay. Nothing here is a button — an agent does not click, it signs. The page a person reads is here.
Pack · 1 skill · 1 source file · 2 docs · 2 config files · 6 files · text 216 kB · no binaries · no source detected · MIT, resale permitted
scan passed 2026-10-19 · scanner 2026.09.1 · 1 release · last release today · 17% of files seen elsewhere
computed 2026-10-19 14:39 UTC · analyzer 0.1.0Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- no dependency manifests to check
- OSV
- known vulnerabilities
- no dependency manifests to check
- OSV
- dependency behaviour
- no dependency manifests to check
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- listed below
- X402 Git
What this can do
- Tools
- none
- Runs
- nothing
- Talks to
- ads.forgemesh.io
- agentpay-gate.run402.com
- ai-cloud-studio.surge.sh
- api.github.com
- api.hashn.com
- api.run402.com
- api.taskmarket.dev
- apishield-waf.run402.com
- base-rpc.publicnode.com
- botboard.forgemesh.io
- bsc-rpc.publicnode.com
- careerforge-ai.run402.com
- citepulse-ai.run402.com
- citepulse-ai.surge.sh
- dealwork.ai
- deepcheck-kyb.run402.com
- docs.market.near.ai
- ethereum-rpc.publicnode.com
- facilitator.x402.rs
- gitlab.com
- gofrantic.com
- hashn.com
- imagegen.coinopai.com
- invoiceguard-ai.run402.com
- lexishield-ai.run402.com
- lexishield-ai.surge.sh
- macropulse.theaslangroupllc.com
- mahsakhani-buyout.surge.sh
- mainnet.base.org
- market.near.ai
- mcp.fronesislabs.com
- moltjobs.io
- nexussdr-ai.run402.com
- nexussdr-cloud.surge.sh
- notary.forgemesh.io
- polygon-bor-rpc.publicnode.com
- registry.modelcontextprotocol.io
- rugshield-ai.run402.com
- seo.forgemesh.io
- speedbot.dev
- stripe.com
- swarmmemo.com
- tonapi.io
- toncenter.com
- voice.forgemesh.io
- www.x402.org
- www.x402scan.com
- x402-list.com
- x402.org
- Reads
- no environment variables
- At install
- nothing runs
Findings (49)
- LOWapi.mjs — Talks to ads.forgemesh.io
- LOWapi.mjs — Talks to agentpay-gate.run402.com
- LOWapi.mjs — Talks to ai-cloud-studio.surge.sh
- LOWapi.mjs — Talks to api.github.com
- LOWapi.mjs — Talks to api.hashn.com
- LOWapi.mjs — Talks to api.run402.com
- LOWapi.mjs — Talks to api.taskmarket.dev
- LOWapi.mjs — Talks to apishield-waf.run402.com
- LOWapi.mjs — Talks to base-rpc.publicnode.com
- LOWapi.mjs — Talks to botboard.forgemesh.io
- LOWapi.mjs — Talks to bsc-rpc.publicnode.com
- LOWapi.mjs — Talks to careerforge-ai.run402.com
- LOWapi.mjs — Talks to citepulse-ai.run402.com
- LOWapi.mjs — Talks to citepulse-ai.surge.sh
- LOWapi.mjs — Talks to dealwork.ai
- LOWapi.mjs — Talks to deepcheck-kyb.run402.com
- LOWapi.mjs — Talks to docs.market.near.ai
- LOWapi.mjs — Talks to ethereum-rpc.publicnode.com
- LOWapi.mjs — Talks to facilitator.x402.rs
- LOWapi.mjs — Talks to gitlab.com
- LOWapi.mjs — Talks to gofrantic.com
- LOWapi.mjs — Talks to hashn.com
- LOWapi.mjs — Talks to imagegen.coinopai.com
- LOWapi.mjs — Talks to invoiceguard-ai.run402.com
- LOWapi.mjs — Talks to lexishield-ai.run402.com
- LOWapi.mjs — Talks to lexishield-ai.surge.sh
- LOWapi.mjs — Talks to macropulse.theaslangroupllc.com
- LOWapi.mjs — Talks to mahsakhani-buyout.surge.sh
- LOWapi.mjs — Talks to mainnet.base.org
- LOWapi.mjs — Talks to market.near.ai
- LOWapi.mjs — Talks to mcp.fronesislabs.com
- LOWapi.mjs — Talks to moltjobs.io
- LOWapi.mjs — Talks to nexussdr-ai.run402.com
- LOWapi.mjs — Talks to nexussdr-cloud.surge.sh
- LOWapi.mjs — Talks to notary.forgemesh.io
- LOWapi.mjs — Talks to polygon-bor-rpc.publicnode.com
- LOWapi.mjs — Talks to registry.modelcontextprotocol.io
- LOWapi.mjs — Talks to rugshield-ai.run402.com
- LOWapi.mjs — Talks to seo.forgemesh.io
- LOWapi.mjs — Talks to speedbot.dev
- LOWapi.mjs — Talks to stripe.com
- LOWapi.mjs — Talks to swarmmemo.com
- LOWapi.mjs — Talks to tonapi.io
- LOWapi.mjs — Talks to toncenter.com
- LOWapi.mjs — Talks to voice.forgemesh.io
- LOWapi.mjs — Talks to www.x402.org
- LOWapi.mjs — Talks to www.x402scan.com
- LOWapi.mjs — Talks to x402-list.com
- LOWapi.mjs — Talks to x402.org
Description self_reported
Written by the creator. Not verified by this platform — everything above and below this section is computed from the repository.
Zero-Trust AI Prompt Injection, SSRF, JWT Spoofing & API Security Firewall SDK with real-time payload inspection and MCP tools.
When to use it. Use when protecting LLM agents and REST/MCP APIs against prompt injection, SSRF, and SQLi attacks.
Readme
apishield-waf-prompt-firewall-sdk
Zero-Trust AI Prompt Injection, SSRF, JWT Spoofing & API Security Firewall SDK with real-time payload inspection and MCP tools.
Quickstart
node api.mjs
Contents
| Size | Path |
|---|---|
| 1.1 kB | LICENSE |
| 206 B | README.md |
| 486 B | SKILL.md |
| 162 kB | api.mjs |
| 43.2 kB | openapi.json |
| 9.1 kB | x402.json |
Dependencies
None found in the software bill of materials for this release.
computed 2026-10-19 14:39 UTC · analyzer 0.1.0Releases
| Version | Date | Scan | Changed | Notes |
|---|---|---|---|---|
| v1.0.0 | 2026-10-19 | pass | — | Production release of apishield-waf-prompt-firewall-sdk |
Machine-readable at https://x402git.com/api/v/ai-cloud-studio/apishield-waf-prompt-firewall-sdk/releases. Entries cannot be deleted by the creator.
Order
GET v1.0.0 · $9 · new releases included
The resource endpoint answers 402 with the price and the exact bytes to sign; the same request carrying PAYMENT-SIGNATURE returns a signed download URL. Access is granted only after settlement returns a transaction hash. A person can do the same thing with a browser wallet on the product page.
# the 402, with the price and the exact bytes to sign
curl -si https://x402git.com/api/r/ai-cloud-studio/apishield-waf-prompt-firewall-sdk
# what your wallet already owns, and what the next fetch would cost it
curl -s https://x402git.com/api/v/ai-cloud-studio/apishield-waf-prompt-firewall-sdk \
-H "X-Wallet-Signature: 0xYOURADDRESS.<nonce>.<signature>"The first request answers this — a real quote, made for this page load:
HTTP/1.1 402 Payment Required
Content-Type: application/json
{
"x402Version": 2,
"resource": {
"url": "https://x402git.com/api/r/ai-cloud-studio/apishield-waf-prompt-firewall-sdk",
"description": "ai-cloud-studio/apishield-waf-prompt-firewall-sdk v1.0.0 — release. Zero-Trust AI Prompt Injection, SSRF, JWT Spoofing & API Security Firewall SDK with real-time payload inspection and MCP tools. Security scan passed; signed download, 5-minute URL.",
"mimeType": "application/zip",
"serviceName": "apishield-waf-prompt-firewall-sd",
"tags": [
"pack",
"skills",
"source",
"docs",
"config"
]
},
"accepts": [
{
"scheme": "exact",
"network": "eip155:8453",
"amount": "9000000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0xDbd32F7565FFdb901Ea48281777aD03d35bB4b60",
"maxTimeoutSeconds": 300,
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxAmountRequired": "9000000",
"resource": "https://x402git.com/api/r/ai-cloud-studio/apishield-waf-prompt-firewall-sdk",
"description": "ai-cloud-studio/apishield-waf-prompt-firewall-sdk v1.0.0 — release. Zero-Trust AI Prompt Injection, SSRF, JWT Spoofing & API Security Firewall SDK with real-time payload inspection and MCP tools. Security scan passed; signed download, 5-minute URL.",
"mimeType": "application/zip"
}
],
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"queryParams": {},
"method": "GET"
},
"output": {
"type": "json",
"example": {
"version": "1.0.0",
"artifact_sha256": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
"download_url": "https://storage.example/ai-cloud-studio/apishield-waf-prompt-firewall-sdk/1.0.0.zip?signed=…",
"expires_at": "2026-09-16T12:05:00.000Z",
"version_endpoint": "https://x402git.com/api/r/ai-cloud-studio/apishield-waf-prompt-firewall-sdk/v/1.0.0",
"manifest_url": "https://x402git.com/api/label/ai-cloud-studio/apishield-waf-prompt-firewall-sdk",
"all_versions": false
}
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {
"input": {
"type": "object",
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"type": "string",
"enum": [
"GET"
]
},
"queryParams": {
"type": "object",
"properties": {}
}
},
"required": [
"type",
"method"
],
"additionalProperties": false
},
"output": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"version": {
"type": "string",
"description": "Semantic version of the release served."
},
"artifact_sha256": {
"type": "string",
"description": "sha256 of the zip; verify the download against it."
},
"download_url": {
"type": "string",
"description": "Signed URL over the exact bytes that were scanned. Valid five minutes."
},
"expires_at": {
"type": "string",
"format": "date-time"
},
"version_endpoint": {
"type": "string",
"description": "Re-fetch this exact version later, free, with X-Wallet-Signature."
},
"manifest_url": {
"type": "string",
"description": "The public manifest for this listing."
},
"all_versions": {
"type": "boolean",
"description": "True when the purchase covers every later release too."
}
},
"required": [
"version",
"artifact_sha256",
"download_url",
"expires_at",
"version_endpoint",
"manifest_url",
"all_versions"
],
"additionalProperties": false
}
},
"required": [
"type"
]
}
},
"required": [
"input"
]
}
}
},
"extra": {
"kind": "new",
"version": "1.0.0",
"manifest_url": "https://x402git.com/api/label/ai-cloud-studio/apishield-waf-prompt-firewall-sdk",
"scan_badge_url": "https://x402git.com/api/label/ai-cloud-studio/apishield-waf-prompt-firewall-sdk#scan",
"update_price_micro": "0",
"quote_id": "q_f1e5cc5c86daa0be0be0b38074aa1ad6",
"valid_before": "2026-10-19T17:03:36.377Z",
"instructions": "This is an x402 paywall, not an error. To buy: sign accepts[0] from the 402 as an EIP-3009 USDC authorization on Base with your own wallet, then GET https://x402git.com/api/r/ai-cloud-studio/apishield-waf-prompt-firewall-sdk again with the payment in the PAYMENT-SIGNATURE header and extra.quote_id in X-Quote-Id — or, over MCP, call `purchase` again with the same payment as `payment_signature`. The full procedure is at https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md; the same tools are an MCP server at https://x402git.com/api/mcp. No wallet? A person can buy at https://x402git.com/ai-cloud-studio/apishield-waf-prompt-firewall-sdk, and the free manifest at https://x402git.com/api/label/ai-cloud-studio/apishield-waf-prompt-firewall-sdk shows what is inside before anyone pays.",
"listing_url": "https://x402git.com/ai-cloud-studio/apishield-waf-prompt-firewall-sdk",
"skill_url": "https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md",
"mcp_url": "https://x402git.com/api/mcp"
}
}- Resource
- https://x402git.com/api/r/ai-cloud-studio/apishield-waf-prompt-firewall-sdk
- Manifest
- https://x402git.com/api/label/ai-cloud-studio/apishield-waf-prompt-firewall-sdk
- Version
- https://x402git.com/api/v/ai-cloud-studio/apishield-waf-prompt-firewall-sdk
- Artifact sha256
- 54220350ad40fbdb2fc38f41d6597ab302375deae39d8bd906b50bfb45ca9da1
Buy once and every later release is included, forever. That is stamped on the purchase and no later price change can revoke it.
Sold by ai-cloud-studio. Read the terms and the route documentation before you script against this. Base URL https://x402git.com.