Active development: 76 commits across 2 contributors
Code ActivitySource linked
13 active day(s) in usephylax/phylax-skill-audit.
Phylax
$PHYLAXUncategorised
Verified BuilderPhylax is a pre-install security layer for AI agent skills. Before a skill can touch a wallet, Phylax scans it and returns a deterministic verdict — ALLOW, WARN, or DENY — with a rule ID and human-readable proof for every finding. It turns "install and hope" into "audit, then install."
QuietLast ship 1mo ago
Latest ship
Builder activity
Build timeline
v0.1.0 — Phylax public launch
Github ReleaseSource verified
First public release of **Phylax** — a pre-install security audit for agent skills on Base (chain 8453). Phylax scans a skill **before** you install it and returns a deterministic `ALLOW` / `WARN` / `DENY` verdict with line-level evidence. ## What it does - **Static scan** — prompt-injection, secret-exfiltration, and obfuscation in `SKILL.md` + manifest - **Onchain scan** — referenced Base contracts: bytecode selectors, proxy/upgradeability, honeypot/owner powers - **Endpoint scan** — x402 endpoints: HTTPS enforcement, 402 schema, price sanity - **Deterministic scoring** — `score = 100 − Σ(sev
View evidence
Sources
- https://usephylax.com/Unverified
- https://x.com/usephylaxUnverified
- https://github.com/usephylax/phylax-skill-auditOfficial