{"slug":"code-security-scan-0dfbbe8a","name":"Code security scan: secrets, vul","summary":"Security audit of a code snippet: static scan for hardcoded secrets (AWS, API and private keys, DB passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified JWT. One entry per finding with rule, severity, exact line number and a suggested fix. Rule-based, no LLM: same snippet, same findings. Send Python or JavaScript as text. Use it as a code review or vulnerability scanner for AI-generated code before shipping. Not a formal audit.","status":"unreachable","headings":[{"slug":"security","title":"Security & risk checks"},{"slug":"code","title":"Code & developer tools"}],"indexable":true,"listed_since":"2026-10-31T18:51:44.750908Z","sources":[{"source":"x402_bazaar","external_id":"https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan","owner_address":"0x734dd50abb63ea5af3d92b8016825475694bd883","seen_at":"2026-11-10T10:13:16.419679Z","removed_at":null}],"endpoints":[{"url":"https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan","host":"fachada.chelsea-hermes.workers.dev","protocol":"x402","state":"unreachable","last_probe_at":"2026-11-10T19:47:26.182332Z","last_ok_at":"2026-11-10T00:53:11.627874Z","tools_count":null,"tools_changed_at":null,"uptime_24h":0.0,"uptime_30d":0.9090909090909091}],"also_listed_as":[{"slug":"fachada-chelsea-hermes-workers-dev-d948a9bd","name":"fachada.chelsea-hermes.workers.dev"}],"payment_options":[{"endpoint_url":"https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"1000000","pay_to":"0x734dd50abb63ea5af3d92b8016825475694bd883","observed_at":"2026-11-10T00:53:11.627874Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":2,"paid_calls_30d":7,"last_paid_at":"2026-11-03T15:03:33.689Z","reported_at":"2026-11-10T10:13:16.419679Z"},"assessment":{"method":"2026.11.3","checks":[{"id":"answers","state":"pass","reason":"Answered a check 24 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 10 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"2 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-11T00:54:15.043475Z"},"identity":{"endpoint_domains":["chelsea-hermes.workers.dev"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}