Skip to content
Menu

Pyhlax Agent

$PYHLAX

Uncategorised

Verified Builder

Phylax is a pre-install security layer for agent skills on Base. Before you install a skill into an agent that holds keys, Phylax scans SKILL.md, manifests, referenced contracts, and x402 endpoints — then returns a deterministic verdict: ALLOW, WARN, or DENY, each backed by cited evidence. Built for the agent economy: npm CLI, free hosted API, browser playground, native Aeon skill, and deep audits on Bankr x402 Cloud. Open source (MIT). Site: usephylax.com · X: @usephylax

QuietLast ship 1mo ago
WebsiteGitHubDEX ScreenerSources

Latest ship

Active development: 76 commits across 2 contributors

Code ActivitySource linked

13 active day(s) in usephylax/phylax-skill-audit.

View evidence ↗

Builder activity

Meaningful, source-backed updates per week. Commits are aggregated, not counted individually.

Build timeline

  1. v0.1.0 — Phylax public launch

    Github ReleaseSource verified

    First public release of **Phylax** — a pre-install security audit for agent skills on Base (chain 8453). Phylax scans a skill **before** you install it and returns a deterministic `ALLOW` / `WARN` / `DENY` verdict with line-level evidence. ## What it does - **Static scan** — prompt-injection, secret-exfiltration, and obfuscation in `SKILL.md` + manifest - **Onchain scan** — referenced Base contracts: bytecode selectors, proxy/upgradeability, honeypot/owner powers - **Endpoint scan** — x402 endpoints: HTTPS enforcement, 402 schema, price sanity - **Deterministic scoring** — `score = 100 − Σ(sev

    View evidence

Sources

Contract
0x16df…37ee