Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. The free lockfile check matches every exactly pinned dependency against OSV and OpenSSF malicious-package advisories with no account. A paid scan adds behavioral analysis with file-and-line evidence. It reports credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, and returns a signed attestatio…
| verified | Not yet: listing not claimed with domain proof. |
| trusted | Not yet: needs 3+ independent buyers and 5+ settlements in 30 days. |
[](https://agentropolis.io/listing/x402.lazaretto)