DevX Repo Run Check - Terms of Service (v1.0.0, effective 2026-10-30) Operator: DevX / Made by DevX (madebydevx.com), contact madebydevx@gmail.com. 1. Service. Heuristic static checks of public GitHub repositories and shell commands for signs of malware delivery. GET /api/basic?repo=... (free) scans the README. GET/POST /api/command (free) scans text you send. GET /v1/check?repo=...[&repo=...] (paid, 1-3 repos) also scans package.json, install.sh, setup.sh, setup.py, requirements.txt, .vscode/tasks.json and Makefile, and reads public GitHub repo/owner metadata. We never clone, build or execute code. 2. Price. 0.005 USDC per paid call, x402 v2 "exact" on Base (eip155:8453), paid to 0xB3cDDccEe6B150c8efFD55B961afc0Ecefe7f247, settled through https://facilitator.payai.network. In the browser you sign an EIP-3009 USDC authorization for exactly that amount; gas is paid by the facilitator. 3. Not charged on error. Payment is settled only after the report is produced. Invalid input or an internal error returns an error and the authorization is not settled. 4. Refunds. If you were charged but got no report, email madebydevx@gmail.com with the Base tx hash within 30 days; verified cases are refunded in USDC on Base to the paying address. 5. Not a guarantee. Verdicts are heuristics over a few files. "no_red_flags" does not prove code is safe and "dangerous" does not prove intent. Run untrusted code in a sandbox without wallet keys or credentials. 6. Data. We do not store checked repos or commands beyond Cloudflare's standard request logs. 7. Changes. Material changes bump the version; the price in the live 402 response is authoritative.