{"name":"deploy-config-risk","description":"Audits deploy configuration files for production risks. Fetches Dockerfile, wrangler.toml, vercel.json, netlify.toml, fly.toml, docker-compose.yml, and serverless.yml and flags open CORS with credentials, exposed admin ports (22/5432/6379/etc), plaintext secrets in inline env, dev/debug mode left enabled, and missing healthchecks. Returns 0-100 score, per-finding kind/severity/path/line/redacted-evidence/recommendation, and a Venice plain-English verdict. Dual input: {repo: 'owner/name'} for public GitHub or {files: [{path, content}, ...]} for private / agent-workspace use. Use it as a Dockerfile lint, vercel.json hardening pass, wrangler.toml review, docker-compose.yml safety check, fly.toml secrets check, netlify deploy gate, open CORS detector, exposed admin port detector, plaintext-secret-in-env detector, or production-readiness deploy gate.","price":"$0.02","method":"POST","input_schema":{"oneOf":[{"type":"object","properties":{"repo":{"type":"string","description":"GitHub repo in 'owner/name' format"},"branch":{"type":"string","description":"Optional branch; defaults to repo's default_branch"}},"required":["repo"]},{"type":"object","properties":{"files":{"type":"array","items":{"type":"object","properties":{"path":{"type":"string"},"content":{"type":"string"}},"required":["path","content"]}}},"required":["files"]}]},"input_example":{"repo":"rooz21/prooflayer-fixtures"},"output_example":{"score":40,"risk_level":"medium","findings":[{"kind":"open_cors","severity":"high","path":"vercel.json","evidence":"source: /(.*), Access-Control-Allow-Origin: *, Access-Control-Allow-Credentials: true","recommendation":"Wildcard CORS with credentials is unsafe — pin Access-Control-Allow-Origin to specific origins, or remove credentials."},{"kind":"exposed_admin_port","severity":"high","path":"Dockerfile","line":3,"evidence":"EXPOSE 22","recommendation":"Exposed admin port 22 from container — restrict to internal networks or remove."}],"signals":{"target_files_scanned":2,"target_files_available":11,"finding_counts_by_kind":{"open_cors":1,"exposed_admin_port":1}},"summary":"vercel.json exposes CORS with credentials to all origins; Dockerfile exposes SSH port 22.","metadata":{"repo":"rooz21/prooflayer-fixtures","branch":"main","files_scanned":2,"files_fetched_via_api":2}},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}