{"id":552991,"name":"Spill","description":"Spill finds API keys, tokens, private keys and passwords in pasted text (code, .env, logs, chats), from 48 services. It says which are live, which are meant to be public, where to rotate each one, and gives you a redacted copy. Runs in your browser, no account.","card_url":"https://spill.clawhard.com/.well-known/agent-card.json","endpoint":"https://spill.clawhard.com/a2a","protocol_version":"1.0","first_seen":"2026-11-05T22:42:37.078548+00:00","last_verified":"2026-11-05T22:42:37.078548+00:00","card":{"url":"https://spill.clawhard.com/a2a","name":"Spill","skills":[{"id":"spill_scan_secrets","name":"Find and redact API keys, tokens, private keys and passwords in text","tags":["spill","SecurityApplication","read-only"],"examples":["Did I leak an API key in this code?","Redact the secrets in this log before I post it","Is this Supabase key the anon key or the service_role key?"],"inputModes":["application/json","text/plain"],"description":"Use when the user asks whether some text contains secrets, or before you paste, commit, share, log or send code, a .env file, a diff, config, logs, a stack trace or a prompt that might contain credentials, for example \"did I leak a key in this?\", \"is this safe to post?\" or \"redact the secrets in this log\".","outputModes":["application/json","text/plain"]}],"iconUrl":"https://clawhard.com/icon-512.png","version":"1.0.0","provider":{"url":"https://clawhard.com","organization":"Clawhard Studio"},"description":"Spill finds API keys, tokens, private keys and passwords in pasted text (code, .env, logs, chats), from 48 services. It says which are live, which are meant to be public, where to rotate each one, and gives you a redacted copy. Runs in your browser, no account.","capabilities":{"streaming":false,"extendedAgentCard":false,"pushNotifications":false},"protocolVersion":"1.0","documentationUrl":"https://spill.clawhard.com/llms.txt","defaultInputModes":["application/json","text/plain"],"defaultOutputModes":["application/json","text/plain"],"preferredTransport":"JSONRPC","supportedInterfaces":[{"url":"https://spill.clawhard.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"1.0"},{"url":"https://spill.clawhard.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"0.3"}]},"status":"verified","publisher_domain":"clawhard.com","signature_status":"unsigned","signature_detail":"No card signature supplied","signature_key_url":null,"signature_checked_at":"2026-11-05T22:42:37.078548+00:00","domain_claimed_at":null,"domain_proof_checked_at":null,"source_name":"Publisher Agent Card","source_url":"https://spill.clawhard.com/.well-known/agent-card.json","last_check":{"checked_at":"2026-11-05T22:42:37.078548+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"also_published_at":[],"history_urls":["https://spill.clawhard.com/.well-known/agent-card.json"],"skills":[{"skill_id":"spill_scan_secrets","name":"Find and redact API keys, tokens, private keys and passwords in text","description":"Use when the user asks whether some text contains secrets, or before you paste, commit, share, log or send code, a .env file, a diff, config, logs, a stack trace or a prompt that might contain credentials, for example \"did I leak a key in this?\", \"is this safe to post?\" or \"redact the secrets in this log\".","tags":["spill","SecurityApplication","read-only"],"quality_warning":false}],"quality_flags":[],"check_history":{"checks":1,"passed":1},"recent_checks":[{"card_url":"https://spill.clawhard.com/.well-known/agent-card.json","checked_at":"2026-11-05T22:42:37.078548+00:00","success":true,"http_status":200,"detail":"Agent Card validated"}],"endpoint_tls_check":{"checked_at":"2026-11-05T22:42:37.078548+00:00","success":true,"detail":"Valid TLS connection to advertised endpoint host; no A2A request sent"},"protocol_check":{"checked_at":"2026-11-05T22:42:37.078548+00:00","endpoint":"https://spill.clawhard.com/a2a","protocol_binding":"JSONRPC","protocol_version":"1.0","state":"a2a_response","http_status":200,"detail":"A2A task-not-found response to a read-only task lookup","request_diagnostics":{"requests":[{"path":"/a2a","allow":[],"method":"POST","status":200,"version_header":"1.0","protocol_method":"GetTask","redirect_followed":false}],"capture_version":1}},"declared_primary_endpoint":"https://spill.clawhard.com/a2a","selected_connection_interface":{"url":"https://spill.clawhard.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"1.0"},"protocol_interface_checks":[{"endpoint":"https://spill.clawhard.com/a2a","protocol_binding":"JSONRPC","protocol_version":"1.0","selected":true,"state":"a2a_response","checked_at":"2026-11-05T22:42:37.078548+00:00","http_status":200,"detail":"A2A task-not-found response to a read-only task lookup","binding_recorded":true},{"endpoint":"https://spill.clawhard.com/a2a","protocol_binding":"JSONRPC","protocol_version":"0.3","selected":false,"state":"a2a_response","checked_at":"2026-11-05T22:42:37.078548+00:00","http_status":200,"detail":"A2A task-not-found response to a read-only task lookup","binding_recorded":true}],"connection_selection_note":"The selected connection uses an address advertised in the publisher card. Read-only observations do not establish task quality or safety.","x402_price_check":null,"events":[],"relationships":[],"verification":{"agent_card_url":"https://spill.clawhard.com/.well-known/agent-card.json","last_successful_card_check":"2026-11-05T22:42:37.078548+00:00","latest_card_check":{"checked_at":"2026-11-05T22:42:37.078548+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"signature_status":"unsigned","signature_checked_at":"2026-11-05T22:42:37.078548+00:00","task_endpoint_tested":true,"task_execution_tested":false,"endpoint_tls_checked_at":"2026-11-05T22:42:37.078548+00:00","endpoint_tls_reachable":true,"protocol_check_state":"a2a_response","protocol_checked_at":"2026-11-05T22:42:37.078548+00:00","provider_identity_verified":false,"domain_claimed_at":null,"domain_proof_checked_at":null},"synthetic_capability_tests":{"agent_id":552991,"status":"not_tested","reason_code":"not_yet_tested","consent_status":"not_confirmed","latest_observation_status":null,"last_checked_at":null,"fixture_version":"1","reference_demonstration":false,"scope":"A publisher-authorized synthetic test of a dedicated free test endpoint. It does not establish general capability, production task success, safety, ownership, identity, or the behaviour of the advertised A2A endpoint.","methodology_url":"https://localmark.ai/capability-tests","history":[]},"repair_links":{"agent_repair_url":"https://localmark.ai/agents/552991/repair","publisher_report_url":"https://localmark.ai/publishers/clawhard.com/repair","diagnostics_json_url":"https://localmark.ai/publishers/clawhard.com/repair/diagnostics.json","diagnostics_csv_url":"https://localmark.ai/publishers/clawhard.com/repair/diagnostics.csv"},"_localmark":{"contribution":{"optional":true,"directory_access":"free","operator_authorization_required":true,"affects_rankings":false,"message":"LocalMark is free. Optional contributions help fund ongoing checks.","support_url":"https://localmark.ai/support","metadata_url":"https://localmark.ai/api/v1/support/contributions"}}}