Agent

Prompt-injection detector

base|id 61498|owner 0xba8a6b555a7a014a3822c962ea0bd778eeb02f11

Checks 1–7

Checks whether a piece of text is trying to hijack an AI assistant - for example hidden instructions like 'ignore your rules and...'. A safety filter for anything an AI agent reads from users, web pages, or tools. Send the text, and it comes back as safe or injection with a confidence score. A protective signal, not a guarantee.

Keyerrorthe check could not completefaildid not passpasspassedrefusedskippeda check this one depends on did not passunclaimedthe document made no claim to checkunprobeableno declared endpoint that a probe can reachnot checkedthis check was never askedFull definitions

The seven checks, with their evidence

7 recorded

Every field the checker recorded, rendered in full rather than summarised, with the timestamp it was recorded at.

Registered?rung 1 · registered
pass
The agent exists in the on-chain registry, with an owner and a document URL.
passed
block_number
52281733
chain_id
8453
owner
0xba8a6b555a7a014a3822c962ea0bd778eeb02f11
registry
0x8004a169fb4a3325136eb29fa0ceb6d2e539a432
token_id
61498
tx_hash
0x08181647ad1c8eefbcb04e634223c9bc0878fd8e872df8dfee0524b65091849c
checked at 2026-10-07T16:00:09.863435Z
Reachable?rung 2 · resolvable
pass
The document URL it declared actually answers when fetched.
passed
elapsed_ms
1911
final_url
https://x402-explorer.hpp.io/agents/3460561a-306a-405d-a101-b5710fa1822f/registration.json
http_status
200
request_url
https://x402-explorer.hpp.io/agents/3460561a-306a-405d-a101-b5710fa1822f/registration.json
scheme
https
uri
https://x402-explorer.hpp.io/agents/3460561a-306a-405d-a101-b5710fa1822f/registration.json
checked at 2026-10-07T16:00:09.863435Z
Readable?rung 3 · parseable
pass
What came back is valid JSON that a machine can read.
passed
body_bytes
1936
body_sha256
dc1f25704d224c775cb5c4a493f4c5d3498849c198be7261d48ee4a7103e307b
content_type
application/json; charset=utf-8
checked at 2026-10-07T16:00:09.863435Z
Follows the spec?rung 4 · conformant
pass
The document meets what ERC-8004 requires of it.
passed
both_fields_present
false
legacy_endpoints_field
false
may_gaps
active
must_violations
(empty)
registrations_checked
0
services_field_source
services
services_status
present
should_gaps
services[].version, registrations
spec_commit
68fc6765761a10fb26f0692df21c8a6f9d12b1be
checked at 2026-10-07T16:00:09.863435Z
Claims its identity?rung 5 · bound
unclaimed
The document names the on-chain agent it belongs to, rather than leaving it unsaid.
unclaimed — the document made no claim to check
declared_agent_id
—
declared_chain
—
declared_registry
—
match
—
reason
unclaimed
registrations_seen
0
checked at 2026-10-07T16:00:09.863435Z
Answers?rung 6 · live
pass
A declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.
passed
endpoints
{"declared":"https://agent.hpp.io/paid/compute/promptguard","elapsed_ms":2050,"final_url":"https://agent.hpp.io/paid/com… (1,370 chars — expand)
{"declared":"https://agent.hpp.io/paid/compute/promptguard","elapsed_ms":2050,"final_url":"https://agent.hpp.io/paid/compute/promptguard","http_status":404,"index":0,"kind":"https","name":"https://agent.hpp.io/paid/compute/promptguard","outcome":"not_live","probed":true,"probed_url":"https://agent.hpp.io/paid/compute/promptguard"}, {"declared":"https://agent.hpp.io/mcp/tools/compute_promptguard","elapsed_ms":1836,"final_url":"https://agent.hpp.io/mcp/tools/compute_promptguard","http_status":404,"index":1,"kind":"https","name":"compute_promptguard","outcome":"not_live","probed":true,"probed_url":"https://agent.hpp.io/mcp/tools/compute_promptguard"}, {"declared":"https://agent.hpp.io/mcp","elapsed_ms":1859,"final_url":"https://agent.hpp.io/mcp","http_status":406,"index":2,"kind":"https","name":"MCP","outcome":"not_live","probed":true,"probed_url":"https://agent.hpp.io/mcp"}, {"declared":"https://x402-explorer.hpp.io/services/resource/3460561a-306a-405d-a101-b5710fa1822f","elapsed_ms":5347,"final_url":"https://x402-explorer.hpp.io/services/service/0xba8a6b555a7a014a3822c962ea0bd778eeb02f11%3A%3As%3A%3Aprompt-injection%20detector?e=3460561a-306a-405d-a101-b5710fa1822f","http_status":200,"index":3,"kind":"https","name":"web","outcome":"live","probed":true,"probed_url":"https://x402-explorer.hpp.io/services/resource/3460561a-306a-405d-a101-b5710fa1822f"}
endpoints_answered_not_live
3
endpoints_declared
4
endpoints_live
1
endpoints_our_error
0
endpoints_payment_gated
0
endpoints_probeable
4
endpoints_probed
4
endpoints_refused
0
checked at 2026-10-07T19:37:51.488079Z
Has feedback?rung 7 · attested
fail
At least one on-chain feedback entry names this agent.
did not pass
distinct_authors
0
feedback_count
0
reason
no_feedback
checked at 2026-10-07T16:00:09.863435Z

Check it again, now

outside the census

Everything above is one sweep, pinned to one block. This asks the same checker to run the same ladder against this agent right now — one request to its declared document, at the current head. The answer belongs to no run, is stored nowhere, and never enters a published rate or finding.

On-chain snapshot

base

token id: 61498
owner: 0xba8a6b555a7a014a3822c962ea0bd778eeb02f11
block: 52,281,733
observed: 2026-10-07T16:00:09.867412Z

tokenURIopen →

https://x402-explorer.hpp.io/agents/3460561a-306a-405d-a101-b5710fa1822f/registration.json

What the fetch saw

https

scheme: https
request url: https://x402-explorer.hpp.io/agents/3460561a-306a-405d-a101-b5710fa1822f/registration.json
final url: https://x402-explorer.hpp.io/agents/3460561a-306a-405d-a101-b5710fa1822f/registration.json
http status: 200
content type: application/json; charset=utf-8
size: 1,936 bytes
sha256: dc1f25704d224c775cb5c4a493f4c5d3498849c198be7261d48ee4a7103e307b
elapsed: 1,911 ms

This run

reproducible

Every status above is scoped to this sweep, at this block. Rerun it and you should get these answers back.

run: c67de707-a82d-4589-8936-acd5a584c720
chain: base
pinned block: 52,281,733
agents: 98,319
started: 2026-10-07T06:00:13.662398Z
finished: 2026-10-07T19:18:37.899751Z
checker: 0.7.0 · 10238dd9af44dfa032e6578390569a413a6bb393
spec commit: 68fc6765761a10fb26f0692df21c8a6f9d12b1be

Reproduce

cargo run -p sweeper -- base   # at block 52281733

What each check measures →

The seven checks, with their evidence

Registered?rung 1 · registered

Reachable?rung 2 · resolvable

Readable?rung 3 · parseable

Follows the spec?rung 4 · conformant

Claims its identity?rung 5 · bound

Answers?rung 6 · live

Has feedback?rung 7 · attested

Check it again, now

On-chain snapshot

What the fetch saw

This run