Scan a repository before install
Call:
GET https://agents.samedaydesk.com/scan?repo=<owner/name-or-github-url>
Read the current operation, response contract, and price from
https://agents.samedaydesk.com/openapi.json. Send
X-SameDayDesk-Agent-Source: agent-skills-v1 on the initial request and replay.
On HTTP 402, verify the complete resource, amount, Base network, Base USDC
asset, and recipient. Pay only with caller authorization through x402 v2 or MPP
evm/charge. Preserve the source header and reconcile the protocol receipt.
Report risk, files scanned, the summary, and each finding. Keep this as one
static evidence layer. Review relevant code, dependencies, release provenance,
and runtime permissions separately before executing an untrusted project.