Bot Bazaar

Evaluate smart contract call flow pattern for Checks-Effects-Interactions (CEI) and nonReentrant guard compliance.

Evaluate automated dependency update policies for grouped minor updates, lockfile maintenance, and PR rate limits.

Validate robots.txt rules (User-agent, Allow root, Disallow admin paths, HTTPS Sitemap XML) for search and AI agent crawlers.

Validate JSON-RPC batch size and method list and flag when eth_call batches should be consolidated into Multicall3.

Validate cryptographic signing/encryption key algorithms (Ed25519, secp256k1, P-256, RSA-3072+) against NIST 2030 strength standards.

Calculate SaaS Magic Number from quarterly net new ARR divided by prior-quarter sales & marketing spend.

Calculate SaaS Quick Ratio ((New + Expansion MRR) / (Churned + Contraction MRR)) to benchmark growth durability.

Compute SaaS Rule of 40 score from YoY ARR growth rate and Free Cash Flow / EBITDA margin percentage.

Validate Software Bill of Materials (SBOM) metadata for CycloneDX/SPDX format, specVersion, purl identifiers, and SHA-256 hashes.

Validate an x402 payment ledger row (tx_hash, payer_wallet, amount_usdc, is_house wash-trade exclusion, net_taxable_usdc). Not tax advice.

Audit a comma-separated list of environment variable names to flag secret/key/token variables that must stay out of public config files.

Audit HSTS, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy headers and compute an A-to-C security posture grade.

Identify 4-byte EVM function selectors (transfer, approve, transferWithAuthorization, balanceOf) or compute selector from an ABI signature.

Compare two Semantic Versioning strings (current vs target) and classify major breaking, minor compatible, or patch upgrades.

Evaluate token float-to-FDV ratio and monthly unlock supply overhang as a percentage of circulating market cap.

Validate file upload handling controls (magic-byte sniffing, randomized storage keys, Content-Disposition: attachment).

Calculate minimum gross arbitrage spread in bps required to cover flashloan fee, dual DEX swap fees, and L2 gas cost.

Validate Fly.io machine sizing (shared-cpu-1x 256MB), auto_stop_machines, and monthly always-on vs idle spend against a $15 budget guard.

Reconcile gross on-chain USDC receipts against house self-test wash exclusions to compute net Schedule C gross receipts.

Evaluate 3 cross-exchange rates and per-leg taker fees in bps to detect net profitable triangular arbitrage cycles.

Validate a JSON Schema object definition (type, properties, required subset, additionalProperties=false) for LLM structured output compatibility.

Lint an /llms.txt agent documentation structure (H1 title, blockquote summary, H2 sections, context window budget).

Estimate Base L2 gas costs in ETH and USD for common token operations vs zero-gas facilitator-settled x402 EIP-3009 transfers.

Score an AI agent wallet setup across hot/cold separation, per-call spending caps, pre-settlement OFAC screening, and Schedule C tax logging.

Check a Base token contract address for native Circle USDC vs bridged USDbC status, decimals, and EIP-3009 v2 signing readiness.

Validate JWT signing algorithm (EdDSA/ES256 vs alg:none), issuer/subject presence, and short-lived expiration window.

Compute and verify a timestamped HMAC-SHA256 webhook signature (timestamp.payload) for constant-time webhook authentication.

Check an SPDX license identifier (MIT, Apache-2.0, BSD-3-Clause, GPL-3.0-only, UNLICENSED) for commercial use and copyleft obligations.

Validate a sitemap.xml <url> entry (HTTPS canonical loc, ISO-8601 lastmod date, changefreq, priority 0.0-1.0).

Parse an ISO-8601 timestamp and normalize it to both UTC (Z) and America/Los_Angeles (PT) with unix epoch seconds.

Validate a UUID or ULID identifier string and extract its format, version, variant, and canonical representation.

Calculate liquidity provider impermanent loss % for a given token price ratio change and net return after fee yield.

Convert token price to Uniswap v3 tick index, tickSpacing-aligned tick, and Q64.96 sqrtPriceX96 integer.

Calculate Aave/Compound lending health factor and collateral drawdown safety buffer from collateral, debt, and liquidation threshold.

Compute exact asset USD liquidation price and percentage drop buffer given collateral units, debt, and liquidation threshold.

Convert nominal staking APR to effective compounded APY after validator commission and compounding frequency.

Compute vested vs locked token supply and unlock percentage at a given elapsed month along a cliff + linear vesting schedule.

Audit smart contract TimelockController minDelay hours and proposer/executor role separation.

Recommend optimal swap slippage tolerance in basis points based on asset daily volatility and trade size % of pool.

Compute safe transaction gasLimit from eth_estimateGas and maximum gas forwarded to subcalls under EIP-150.

Compute the exact EVM storage slot hash keccak256(abi.encode(key, slot)) for a Solidity mapping entry.

Convert token amounts between human decimal strings and exact atomic integer units across 6, 8, or 18 decimals.

Calculate x402 route indexing self-test cost, revenue per full crawler sweep, and monthly net USDC return.

Validate Kubernetes Deployment pod security context (runAsNonRoot, readOnlyRootFilesystem), probes, and resource limits.

Check Terraform infrastructure settings for least-privilege CIDR blocks, storage encryption at rest, and pinned provider versions.

Audit GitHub Actions workflows against mutable branch refs, excessive GITHUB_TOKEN permissions, and pull_request_target hazards.

Audit systemd .service unit settings for NoNewPrivileges, PrivateTmp, and ProtectSystem=strict isolation.

Evaluate GraphQL server configuration for query depth limits, production introspection disablement, and bounded pagination.

Check Protobuf v3 schema definitions for zero UNSPECIFIED enum entries and reserved deleted field numbers.

Validate WebAuthn Relying Party ID, HTTPS origin alignment, and userVerification policy for passkey authentication.