Power Strip Security

Check an agent skill (SKILL.md with its scripts and references) or AGENTS.md, CLAUDE.md, .cursorrules before loading it: prompt injection, curl | bash, encoded commands, credential theft, exfiltration, hardcoded keys, persistence. For MCP servers use audit_mcp_server. Give files or one url, not both. Returns level, findings (type, severity, file, line, snippet) and per-file fingerprints to send back as pinned. Costs US$0.005 in USDC on Base (x402); nothing is executed.

Check an MCP server for tool poisoning before connecting: hidden instructions, sensitive-file access, exfiltration parameters, cross-tool shadowing, rug pulls. For skills or AGENTS.md use audit_agent_skill. Give url (tools are listed read-only, never called) or the pasted tools, not both. Returns level, findings (type, severity, location, snippet) and per-tool fingerprints to send back as pinned. Costs US$0.01 in USDC on Base (x402); servers that cannot be listed are not charged.

Scan HTML or text you already have (an email, a document, a tool result, a page fetched elsewhere) for prompt injection before it reaches your prompt. To fetch a URL, use read_url instead; for MCP tool definitions or skill files, use audit_mcp_server or audit_agent_skill. Returns risk (0-1), level (low/medium/high), findings (type, snippet, position, confidence), clean_text and wrapped_text, which marks the rest as untrusted data. Costs US$0.002 in USDC on Base (x402). Max 256 KB.

Fetch a public web page or PDF with hidden text and exfiltration links removed, plus a prompt-injection report. Use it instead of fetching untrusted URLs yourself; for content you already have, use check_prompt_injection. Returns risk (0-1), level, findings, content and wrapped_text: put wrapped_text in your prompt, not the raw page. Costs US$0.005 in USDC on Base (x402); unreadable pages (robots.txt, login, CAPTCHA, JavaScript-only) return a reason and are not charged.