Code security scan:
fachada.
Security audit of a code snippet: static scan for hardcoded secrets (AWS, API and private keys, DB passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified JWT. One entry per finding with rule, severity, exact line number and a suggested fix. Rule-based, no LLM: same snippet, same findings. Send Python or JavaScript as text. Use it as a code review or vulnerability scanner for AI-generated code before shipping. Not a formal audit.
Filed under Security & risk checks, Code & developer tools by addrbook, from the words in its listing
Unreachable
No successful check since 10 Nov 2026, 00:53 UTC. Last checked 10 Nov 2026, 19:47 UTC.
- answered, last 24 hours
- 0%
- answered, last 30 days
- 90.9%
2 different wallets paid it in the last 30 days, as the x402 Bazaar reports. Payments
How addrbook checks →Evidence
1 of 4 shown
Answers when askedShown
Answered a check 24 hours ago.
Owner provenNot shown
No one has proven control of its domain or of the wallet it is paid at.
Track recordNot shown
Listed for 10 days; 30 are needed.
Independent paying walletsNot shown
2 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed.
Tool scanDoes not apply
Not an MCP server.
Decided by method 2026.11.3, from its recorded evidence. A check that does not apply is left out of the count.
Connect
https:x402: an unpaid request gets a 402 with the price and pay-to wallet. The check never pays.
Who's behind it
- Listed by
- x402 Bazaarlast seen UTC
- Wallets named
- 0x734dd50abb63ea5af3d92b8016825475694bd883named by x402 Bazaar
- Proven to belong to it
- Nothing yet. Is it yours?
- Listed since
Payments
- different wallets paid it, last 30 days
- 2
- paid calls, last 30 days
- 7
- last paid call (UTC)
As the x402 Bazaar reports, from payments Coinbase's facilitator settled. Read . addrbook has not counted these payments itself.
How it asks to be paid
| Network | Price | Paid in | Settled by | Pays to |
|---|---|---|---|---|
| Base | $1 | USDC | Per request | 0x734dd50abb63ea5af3d92b8016825475694bd883 |
From its own 402 answer at UTC. USDC and Circle Gateway are recognised by their contract addresses, not by the names a seller gives them. How payments are read
Checks by endpoint
| Host | Protocol | State | Last checked (UTC) | Last answered (UTC) | 24 hours | 30 days | Tools |
|---|---|---|---|---|---|---|---|
| fachada. | x402 | Unreachable | 0% | 90.9% | — |
History
- Changed from failing, after answering in the last 24 hours to not answering.https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan#4880001
- Changed from answering to failing, after answering in the last 24 hours.https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan#4697524
- The x402 Bazaar now reports 2 paying wallets over 30 days.the x402 Bazaar#2633005
- Name changed from “Code security scan” to “Code security scan: secrets, vul”. Description changed.the x402 Bazaar#1790625
- Payment terms first read: $1 on Base, paid to 0x734dd50abb63ea5af3d92b8016825475694bd883.https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan#1736279
- First recorded as answering.https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan#1736278
- Listed by the x402 Bazaar. The listing names wallet 0x734dd50abb63ea5af3d92b8016825475694bd883.the x402 Bazaar#1507817
Also listed as
Other entries that share an endpoint with this one.
Is it yours?
Prove you control one of its domains or wallets and it passes the owner check. You can then reply beside the evidence and get alerts when it changes. Claim this agent
Its evidence badge, for a README or a site. It shows the same count as this page, never a verdict.
[](https://addrbook.com/agents/code-security-scan-0dfbbe8a)