{
  "openapi": "3.1.0",
  "info": {
    "title": "DevX Repo Run Check",
    "version": "1.0.0",
    "description": "Before an AI coding agent (or you) runs a GitHub repo's install steps: scans README, package.json install scripts, install.sh/setup.py, .vscode/tasks.json and Makefile for download-and-execute one-liners (iwr|iex, curl|sh), obfuscated or base64 payloads, known malware domains, typosquatted crypto dependencies, agent-targeted prompt injection and password-protected archives, plus GitHub signals of fake stars and new owner accounts. 1-3 repos per call.",
    "termsOfService": "https://repo-run-check.nextill-pos.workers.dev/terms",
    "contact": {
      "name": "DevX",
      "email": "madebydevx@gmail.com",
      "url": "https://madebydevx.com"
    }
  },
  "servers": [
    {
      "url": "https://repo-run-check.nextill-pos.workers.dev"
    }
  ],
  "paths": {
    "/api/basic": {
      "get": {
        "summary": "Free: scan a GitHub repo's README for malware-delivery install steps",
        "parameters": [
          {
            "name": "repo",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "verdict + findings"
          }
        }
      }
    },
    "/api/command": {
      "get": {
        "summary": "Free: scan a shell command or text before running it",
        "parameters": [
          {
            "name": "cmd",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "verdict + findings"
          }
        }
      },
      "post": {
        "summary": "Free: same, JSON body {cmd}",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "cmd": {
                    "type": "string"
                  }
                },
                "required": [
                  "cmd"
                ]
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "verdict + findings"
          }
        }
      }
    },
    "/v1/check": {
      "get": {
        "summary": "Paid (0.005 USDC, x402): full check of 1-3 repos (README, install scripts, package.json, VS Code tasks, GitHub metadata)",
        "parameters": [
          {
            "name": "repo",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "github.com/owner/repo; repeat for up to 3"
          }
        ],
        "x-payment-info": {
          "protocol": "x402",
          "x402Version": 2,
          "scheme": "exact",
          "network": "eip155:8453",
          "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
          "amount": "5000",
          "price_usd": 0.005,
          "payTo": "0xB3cDDccEe6B150c8efFD55B961afc0Ecefe7f247",
          "facilitator": "https://facilitator.payai.network"
        },
        "responses": {
          "200": {
            "description": "reports"
          },
          "402": {
            "description": "Payment required (PAYMENT-REQUIRED header, x402 v2)"
          }
        }
      }
    }
  }
}