scan

Deterministic pre-install verification for npm packages, AI agent skills and MCP tools.

Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. Matches the exact version against OSV and OpenSSF malicious-package advisories, then runs behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, returning a verdict with file-and-line evidence, a SHA-256 of what was analyzed, and a signed attestation that verifies offline. No LLM in the scan path, so the same input yields the same verdict.

UNRATEDListed

Overview

Grade?

UNRATED

0 of 30 paid calls toward a letter

Price

$0.03 per call

Paid calls

none yet

delivery unknown until someone pays

More info

Seller?

0x428df107…4eab4da0

URL

https://lazaretto.dev/v1/scan

MCP server on this host: io.github.jamesdfinance-dev/lazaretto

Seen

first 34 days ago · last 12 hr ago

64 free handshakes

Payment

Pays through

x402

Offered on?

Base USDC

Listed on?

Base

Score, from free handshakes onlyweights 2026.09.6

UN
RATED

0.734 liveness verified, no letter

To a letter · 30 paid calls

0 of 30

Held down by latency p95 · gap to 1.000 is 0.266: 0.066 uncertain ? + 0.200 short ? · 0.066 to B

How the composite of 0.734 is made up, part by part
Component	Weight	Measured	Lower bound ?		Adds	Short ?	Uncertain ?
latency p95costs the most it answered as fast as its class	0.20	0.00	0.000		0.000	−0.200	0
liveness it answered at all	0.60	1.00	0.890		0.534	0	−0.066
price stability the price stayed where it was listed	0.20	1.00	1.000		0.200	0	0
Composite	1.00		0.734	gap to 1.000 = 0.266 · 0.200 short · 0.066 uncertain	0.734	−0.200	−0.066

Not measured: correctness · nobody paid; honesty · nobody paid; schema conformance · no answer had a published shape to check

The multiplication, written out

  0.200 × 0.000   latency p95    
+ 0.600 × 0.890   liveness       
+ 0.200 × 1.000   price stability
= 0.734           → UNRATED: 56 of 30 paid calls      weights 2026.09.6 · 56 samples · seed cap_01M1A5A0ENJJ24V15XRJEQAEQS|2026-09-03T20:40:32.752Z|2026.09.6

Verify it yourselfnpx teppi-check https://lazaretto.dev/v1/scancurl -s https://api.teppi.xyz/v1/trust/cap_01M1A5A0ENJJ24V15XRJEQAEQS