DopamineDesk AI Marketplace · Code Audit

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://ai-data-marketplace-1042299154756.us-central1.run.app/api/v1/code_audit", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "code": "def get_user(id):\n  return db.execute('SELECT * FROM users WHERE id = ' + id)",
    "language": "python"
  }),
});
const data = await res.json();

curl -X POST \
  "https://ai-data-marketplace-1042299154756.us-central1.run.app/api/v1/code_audit" \
  -H "Content-Type: application/json" \
  -d '{"code":"def get_user(id):\n  return db.execute('SELECT * FROM users WHERE id = ' + id)","language":"python"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "caveat": "This is a fast heuristic scan, not a professional security audit.",
  "engine": "deterministic_static_rules_v1",
  "findings": [
    {
      "evidence": "SELECT * FROM users WHERE id = ' +",
      "line": 2,
      "recommendation": "Use parameterized database queries.",
      "rule": "sql_string_concatenation",
      "severity": "high"
    }
  ],
  "findings_count": 1,
  "language": "python",
  "lines_scanned": 2,
  "marketplace_metadata": {
    "availability": "operational",
    "billable": true,
    "data_mode": "computed_service",
    "source": "deterministic static rules"
  },
  "success": true
}