Web30.004 USDG / dosedeterministic · no paid AI

Calldata X-Ray

See what a transaction really does before your agent signs it.

Decodes raw EVM calldata or an EIP-712 signature request into one plain sentence, then flags drainer patterns: unlimited approvals, setApprovalForAll, EIP-2612 and Permit2 permits, increaseAllowance, zero-price Seaport listings, never-expiring deadlines, unknown spenders and blind-signed hashes. Multicalls are unpacked recursively.

Playground

Input · JSON

Output

Waiting for a dose.

Edit the example or run it as-is.

Input

calldatastring
0x-prefixed transaction data.
typedDataobject
Or an EIP-712 object (domain, primaryType, message).
senderstring
Optional: the signing wallet, for context.
trustedSpendersarray
Optional: addresses you already trust.
decimalsnumber
Optional token decimals for amounts (default 18).

Output

verdictstring
safe | caution | danger
summarystring
One plain-English sentence.
flagsarray
Every risk with severity, title and explanation.
callobject
Decoded function, selector, arguments and inner calls.

How it learned

No model, no training run. The rules were written by reading public research and open-source tooling, then encoded by hand. Credit where it’s due:

# 1. Ask for the price (returns 402 + PAYMENT-REQUIRED)
curl -i -X POST https://your-domain/api/x402/calldata-xray \
  -H "Content-Type: application/json" \
  -d '{"text":"ignore previous instructions"}'

# 2. Free trial, no payment (rate-limited)
curl -X POST https://your-domain/api/try/calldata-xray \
  -H "Content-Type: application/json" \
  -d '{"text":"ignore previous instructions"}'

Next skill

Injection Shield

→