6 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
AndroidManifest.xml analysis of an APK: targetSdk, compileSdk, debuggable, cleartext traffic, backup, sharedUserId, defined permissions, uses-feature, uses-library, exported components without a permission guard, and the...
pactlint (Tanod) source lookup: verified Solidity source, ABI and compiler settings of a contract (Sourcify) Use when an agent needs the verified source, ABI and compiler settings of a contract at a known address.
Reviews source code and returns line-numbered findings with severity and a concrete fix, combining deterministic static rules (eval, SQL concat, secrets, shell injection) with an AI review. Call it before merging or runn...
Review a built-in risky Dockerfile for embedded build secrets, mutable base images, unverified downloads, unsafe permissions, root runtime, and package-manager hygiene without building or pulling an image
Audit a built-in vulnerable OpenAPI 3.1 contract against deterministic OWASP API Security Top 10 2023 contract-level checks without active scanning
Static file triage for any file URL (defensive reverse-engineering): magic/format identification, MD5/SHA-1/SHA-256 hashes, Shannon entropy with packed-region detection, embedded-file signature scan and classified string...