Nightshift Labs: link, token & signature pre-checks
dev.workers.nightshift-labs.nightshift-x402/agent-safety
Tools
Exactly what the server advertised in the scan completed . Effects and capabilities are classified by Squatch from each tool's metadata. Squatch never runs tools. Compared with the previous scan: 0 new, 1 changed.
- Effect: Read 16
- Effect: Write 1
- Effect: Unknown effect 1
Showing 18 of 18 tools
| Details | ||
|---|---|---|
| web_link_check Link / URL phishing pre-check before an agent opens, clicks or forwards a link: brand look-alikes (typosquats, homoglyphs, brand in subdoma… | Effect: Write | |
| base_balance Base wallet balances: native ETH and USDC for any address, with the block number they were read at. Price: $0.005 USDC on Base per call (x4… | Effect: Read | |
| base_gas Base gas snapshot: gas price, base fee, priority fee, 10-block base-fee trend, ETH/USD (Chainlink) and estimated USD cost of an ETH transfe… | Effect: Read | |
| base_token_check Base token safety pre-check: name/symbol/decimals/supply, owner and renounce status, proxy implementation, privileged functions found in by… | Effect: Read | |
| base_token_price Live USD price of any ERC-20 token on Base from on-chain DEX quotes (Uniswap v3 0.05/0.3/1% pools and Aerodrome, against USDC and WETH; WET… | Effect: Read | |
| base_tx Decode a Base transaction: status, block time, from/to, ETH value, fee, method selector and every ERC-20 transfer with symbol and human amo… | Effect: Read | |
| domain_dns DNS lookup in one call: A, AAAA, CNAME, MX, TXT, NS and CAA records with TTLs (or just the types you ask for), NXDOMAIN status, DNSSEC vali… | Effect: Read | |
| domain_email_check Domain DNS and email-security check: A/AAAA, NS, MX (incl. null MX), SPF, DMARC policy, CAA, plus a list of issues and a 0-100 email securi… | Effect: Read | |
| domain_whois Domain registration lookup (RDAP, the official WHOIS successor): registration date and age in days, expiry, registrar and its abuse email, … | Effect: Read | |
| ens_resolve Resolve ENS and Basenames (name.eth, name.base.eth): name → address, or address → primary name with forward verification, plus text records… | Effect: Read | |
| evm_decode_calldata Decode EVM transaction calldata before signing: finds the function signature (signature DB, verified by re-encoding to reject selector coll… | Effect: Read | |
| evm_typed_data_check Check an EIP-712 signature request BEFORE signing (the JSON passed to eth_signTypedData_v4): detects ERC-2612 Permit, DAI permit, Uniswap P… | Effect: Read | |
| wallet_screen Wallet / counterparty screen before you send funds or accept a payer: OFAC SDN sanctioned-address check (EVM list, refreshed from the 0xB10… | Effect: Read | |
| web_brand Brand kit from a website: site name, logo candidates (JSON-LD logo, header/home-link image, inline SVG logo, apple-touch-icon/favicons, og:… | Effect: Read | |
| web_extract Fetch any public web page and return clean Markdown of the main content plus title, meta description, word count and absolute links. Strips… | Effect: Read | |
| web_security_headers Website security-headers audit: follows redirects (SSRF-guarded) and grades the final page A–F on HSTS, Content-Security-Policy (script-src… | Effect: Read | |
| x402_preflightChanged x402 seller preflight: check a paid endpoint BEFORE paying. Probes it unpaid, parses the 402 (v2 header or v1 body) and checks each option:… | Effect: Read | |
| base_portfolio Base wallet portfolio: ETH plus 12 major Base tokens (USDC, USDbC, DAI, EURC, WETH, cbETH, wstETH, cbBTC, AERO, DEGEN, VIRTUAL, BRETT) with… | Effect: Unknown effect |