api.aiskills402.com x402 offerings

A/B Test Readout Check — Checks the written readout of ONE A/B test (a paragraph, an email, a table or a slide transcript) for the five statistical mistakes that turn a no-effect test into a "win", and lists only those, one line each with a fixed code, the place, the evidence with the arithmetic and the fix - or exactly No findings. It catches stopping the moment a result looks significant, many metrics or variants judged without correction, a split of users that differs from the planned split …

A2A 1.0 Agent Card Writer — Writes the JSON an agent needs for version 1.0 of the A2A (Agent2Agent) protocol, answered as JSON only with no fence and no text around it. Covers the agent card (supportedInterfaces with protocolBinding and protocolVersion, capabilities, skills, securitySchemes and securityRequirements, default input and output modes), the JSON-RPC requests (SendMessage, SendStreamingMessage, GetTask, ListTasks, CancelTask, push notification configs), the replies (task, message, da…

Accessibility Review: WCAG Defects in Markup — Reviews pasted HTML or JSX for the accessibility defects a screen reader or keyboard user hits first, and names the WCAG 2.2 success criterion for each. It flags images without a text alternative, form fields without a label, buttons and links with no accessible name, clickable elements that a keyboard cannot reach, focusable content hidden from assistive technology, personal-data fields without autocomplete, data tables without header cells and pa…

AI Crawler Access Check: Who Gets a 403 — Reads the results of probing a website with AI-crawler user agents (status codes per bot, a control request, sometimes robots.txt or the site's settings) and says what they really show as JSON - whether training bots, search bots and user-triggered agents are open, blocked, mixed or unknown, what is behind a refusal, and whether the robots.txt that answered is the site's own file. Knows the traps - a bare bot name proves nothing and lies differently for…

Bulgarian Transliteration API: Cyrillic to Latin by the official Bulgarian system (Transliteration Act 2009), not ISO 9 or Russian. Returns the text, a URL slug and the letters Bulgarian does not have. Deterministic code, no language model. $0.003 USDC per call, no account. POST JSON {input}, up to 60000 chars; free example at https://api.aiskills402.com/v1/run/bulgarian-transliteration/example

Cron Dialect Convert API: moves a schedule between crontab, GitHub Actions, Cron Hub, Quartz and Cloudflare Workers Cron Triggers so the target fires at exactly the same times - weekday numbers, either/both day rules, macros, time zones. $0.005 USDC per call, no account, no language model: what cannot run at the same times gets a paid CANNOT CONVERT verdict. POST JSON {source, target, schedule, timezone}; free example at https://api.aiskills402.com/v1/run/cron-dialect-convert/example

CSV Repair API: turns CSV a parser rejects into valid CSV without changing any cell - fixes quotes, pads short rows, unwraps Markdown tables, chat text and fences; 1,250 and 007 stay as written. $0.004 USDC per call, no account, no language model: a too-long row, an ambiguous row or prose with no table gets a paid CANNOT REPAIR verdict. POST JSON {input} up to 60 000 chars; free example at https://api.aiskills402.com/v1/run/csv-repair/example

JSONL Repair API: turns broken JSON Lines (NDJSON) into one valid record per line - joins, splits, unwraps, drops fences and chat text, fixes quotes, keys, commas, Python literals; numbers copied as written. $0.003 USDC per call, no account, no language model: a cut-off record, repeated key or ambiguous leading zero gets a paid CANNOT REPAIR verdict. POST JSON {input} up to 60 000 chars; free example at https://api.aiskills402.com/v1/run/jsonl-repair/example

Markdown Table Repair API: turns a broken table, tab-separated text or an HTML table into a GFM table without changing any cell - adds the alignment row and pipes, escapes a pipe in a cell, pads short rows; 007 and 1.10 stay as written. $0.003 USDC per call, no account, no language model: a too-long row or an ambiguous pipe gets a paid CANNOT REPAIR verdict. POST JSON {input} up to 60 000 chars; free example at https://api.aiskills402.com/v1/run/markdown-table-repair/example

Mojibake Repair API: undoes broken encoding (UTF-8 read as Windows-1252, Latin-1 or Windows-1251, once or twice) byte by byte. Deterministic code, no language model: mixed, half-damaged or lost-byte text gets a CANNOT REPAIR verdict instead of a guess (still one paid call). $0.004 USDC per call, no account. POST JSON {input}, up to 60000 chars; free example at https://api.aiskills402.com/v1/run/mojibake-repair/example

Agent Done Check: Stop False Success Reports — Stops an AI agent from reporting false success, or hallucinated completion: work it calls done that did not happen. Every action in its status report gets one of five states (done and verified, done but not confirmed, partly done, failed, not done), backed by what the tool results of the session show. Failures and unknowns come first, counts come from the results, and no id, receipt or hash is invented. When a result does show success, the agent sa…

Agent Loop Review: Repeats, Caps, Self-Grading — Reviews the description, configuration or code of an agent loop, anything that repeats on its own: a scheduled job that calls a model, an agent that retries until it is done, a batch of actions, a self-improving prompt loop. It finds where the loop runs away or repeats a side effect (no ceiling on iterations, the same scheduled tick delivered twice, a progress marker written after the effect, nothing kept between iterations, a batch that goes on …

Agent Report Audit: Which Claims the Log Supports — Audits the report an AI agent wrote about its own session against the tool log of that session. Every numbered claim of the report gets one of two verdicts, supported or not_supported, with the log line that decides it copied exactly. A claim is supported only when the log shows a call that did it, a complete output that shows success, the same object and scope, nothing later that undoes it, and every part of a compound claim. A command that w…

Base Receipt Verify API: checks on Base mainnet that a transaction really paid USDC to an address - status, transfer, amount, payer and EIP-3009 nonce from the chain logs, never from the relayer. Base mainnet USDC only. $0.005 USDC per check, a live measurement. POST JSON {tx, pay_to, amount_micro?, from?, nonce?}; free example at https://api.aiskills402.com/v1/run/base-receipt-verify/example

Bill Spike Finder — Finds the loops behind a bill spike or an unexpected bill. Reviews a web app's code and config for loops and repeats that run up the bill on their own on Vercel, Turso, Cloudflare Workers and D1 and paid AI APIs. Finds two schedulers on one job, retries without a cap, work that triggers itself, client polling and React render loops, caches cleared on every write, middleware running on every static file, queues that resend failures forever, image settings that multiply transf…

Code Review — Reviews a code change (a diff or a changed file pasted as text) and reports real problems ranked by severity — correctness bugs, security holes, data loss, missing error handling, edge cases, resource leaks — each with location, reason and a concrete fix in words. Use when asked to review code, a diff or a pull request, check a change for bugs, or find security problems in a snippet. One-time purchase of the SKILL.md file itself (Agent Skills format), not an API call: $0.01 USDC, …

Cold Email — Writes a short, honest first outreach message to a stranger in business, in the recipient's language, with a subject line, one specific reason for writing and one small ask. Use when asked to write a cold email, a first outreach message, a sales or partnership introduction, or a prospecting note, in any language. One-time purchase of the SKILL.md file itself (Agent Skills format), not an API call: $0.03 USDC, yours forever incl. free re-downloads and new versions. Tested with a str…

CORS Config Review — Reviews CORS code or server configuration (an Express or Flask handler, an nginx block, a framework setting) for the five mistakes that let a hostile web page read private responses, and lists only those, one line each with a fixed code, the place, why it is dangerous and the fix - or exactly No findings. It catches a request Origin copied into the allow header while cookies are allowed, a wildcard origin together with credentials, the null origin allowed, an origin check b…

CSP Header Review — Reviews ONE Content-Security-Policy header, with any note pasted beside it, and lists only the gaps that let injected script run or let the page be framed, one line each with a fixed code, the directive, why it hurts and the fix - or exactly No findings. It catches unsafe-eval or unsafe-inline in the script directive, a star, a data source or a bare scheme as a script source, a policy with neither object-src nor a default-src, a missing base-uri, a missing frame-ancestors, a…

CSS Motion Review — Reviews pasted CSS, Tailwind classes or JSX styles for the motion mistakes that hurt real visitors, and lists only those, one line each with a fixed code, the place, why it matters and the fix - or exactly No findings. It catches movement that starts by itself, runs longer than five seconds and has no pause control, which fails WCAG 2.2.2 at Level A, large scaling or panning motion with no reduced-motion rule anywhere, a reduced-motion rule that leaves the large motion runni…

CSV Repair: Fix Broken CSV, Keep Every Cell — Repairs broken or messy CSV so a standard parser reads it, without changing the text of a single cell, and answers with the CSV only, no code fence. Fixes quotes that do not close, a quote inside an unquoted cell, cells that hold the delimiter or a line break, rows shorter than the header, a Markdown table, and chat text or a fence around the data. Numbers such as 1,250, 007 and 1.10, dates, spaces inside cells and values that look like formulas sta…

CSV to JSON Rows: Every Cell Stays Text — Converts CSV into a JSON array with one object per row, keyed by the header, and answers with the JSON only, no code fence. Every value stays a string exactly as the cell reads, so 007, 1,250, 1.10, TRUE, null, dates, spaces around a name and a value that starts with an equals sign are never turned into numbers, booleans or null, and an empty cell is an empty string. Only a column the task names as integer, number or boolean is converted. Quotes are rem…

D1 Migration Writer: SQLite Migrations That Apply — Writes a SQL migration for Cloudflare D1 or SQLite from the current schema and the change wanted, so it applies on the first try and leaves the rows already in the database right. Knows what D1 refuses or breaks on, measured on a real D1 database - BEGIN and COMMIT in the file, foreign keys that cannot be switched off (a rebuild defers them, keeps the table name, and never closes with defer_foreign_keys = false, which on D1 silently skips the …

Dockerfile Review — Reviews ONE Dockerfile for the five build mistakes that cost security or build time, and lists only those, one line each with a fixed code, the instruction, why it hurts and the fix - or exactly No findings. It catches a final image that runs as root, a base image with no tag or the latest tag, a secret passed through an argument, an environment value or a file copy so that it stays in the image history, source copied in before the dependencies are installed so the cache is …