Skip to content

Add HostDeFi token-safety scanner - #62

Closed
verixiaapps wants to merge 1 commit into
EvoMap:mainfrom
verixiaapps:add-hostdefi
Closed

verixiaapps wants to merge 1 commit into
EvoMap:mainfrom
verixiaapps:add-hostdefi

Conversation

@verixiaapps

@verixiaapps verixiaapps commented Sep 15, 2026 •

Copy link
Copy Markdown

Adds HostDeFi — a multi-chain DEX front-end on Solana + 8 EVM chains (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Monad) with a free token-safety scanner built in: A+–F grades from on-chain checks (mint/freeze authority, liquidity depth, holder concentration, contract flags). The scanner is free with no signup (fair use: 100 checks/day per IP) and is also exposed as a keyless REST API and hosted MCP endpoint for agents. Site: https://hostdefi.com · API docs: https://hostdefi.com/docs/api/


Note

Low Risk
Documentation-only README list update with no runtime or security impact.

Overview
Adds HostDeFi to the Prompt and Behaviour Optimization curated list in README.md, inside the AUTOGEN:prompt-optimization block.

The new entry points to https://hostdefi.com and describes it as an agent-oriented token-safety scanner with a public A2A agent card, a hosted MCP server, and x402-paid endpoints for autonomous checks.

Reviewed by Cursor Bugbot for commit 0a25317. Bugbot is set up for automated code reviews on this repo. Configure here.

@cursor cursor Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale Bugbot comment from a previous run.

Comment thread README.md
- [**Promptfoo**](https://github.com/promptfoo/promptfoo#readme) - Open-source LLM evaluation and red-teaming framework. Test prompts, agents, and RAGs with 90+ model providers and 67+ security plugins. by [@promptfoo](https://github.com/promptfoo) (24,949 stars)
- [**TextGrad**](https://github.com/zou-group/textgrad#readme) - Automatic differentiation via text. Backpropagation through LLM-provided textual gradients, published in Nature. by [@zou-group](https://github.com/zou-group) (3,721 stars)
- [HostDeFi](https://hostdefi.com) - Agent-ready token-safety scanner with a public A2A agent card, hosted MCP server and x402-paid endpoints for autonomous checks.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Manual autogen entry will be overwritten

High Severity

The HostDeFi bullet sits inside the AUTOGEN:prompt-optimization region but is missing from data/projects.json. generate-readme.js replaces that region from JSON, so validate.js fails reproducibility and the next regen drops the entry.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 0ea163a. Configure here.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

There are 3 total unresolved issues (including 1 from previous review).

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 0a25317. Configure here.

Comment thread README.md
<!-- AUTOGEN:prompt-optimization -->
- [**Promptfoo**](https://github.com/promptfoo/promptfoo#readme) - Open-source LLM evaluation and red-teaming framework. Test prompts, agents, and RAGs with 90+ model providers and 67+ security plugins. by [@promptfoo](https://github.com/promptfoo) (24,949 stars)
- [**TextGrad**](https://github.com/zou-group/textgrad#readme) - Automatic differentiation via text. Backpropagation through LLM-provided textual gradients, published in Nature. by [@zou-group](https://github.com/zou-group) (3,721 stars)
- [HostDeFi](https://hostdefi.com) - Agent-ready token-safety scanner with a public A2A agent card, hosted MCP server and x402-paid endpoints for autonomous checks.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HostDeFi fails inclusion criteria

High Severity

The new listing links to hostdefi.com instead of a GitHub repository. Inclusion requires public source, recent activity, and at least 50 stars. HostDeFi is a commercial DEX product, so it does not qualify for this curated open-source list.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 0a25317. Configure here.

Comment thread README.md
<!-- AUTOGEN:prompt-optimization -->
- [**Promptfoo**](https://github.com/promptfoo/promptfoo#readme) - Open-source LLM evaluation and red-teaming framework. Test prompts, agents, and RAGs with 90+ model providers and 67+ security plugins. by [@promptfoo](https://github.com/promptfoo) (24,949 stars)
- [**TextGrad**](https://github.com/zou-group/textgrad#readme) - Automatic differentiation via text. Backpropagation through LLM-provided textual gradients, published in Nature. by [@zou-group](https://github.com/zou-group) (3,721 stars)
- [HostDeFi](https://hostdefi.com) - Agent-ready token-safety scanner with a public A2A agent card, hosted MCP server and x402-paid endpoints for autonomous checks.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Token scanner in wrong category

Medium Severity

The prompt-optimization section is for frameworks that optimize agent prompts and behavior. HostDeFi is a DeFi token-safety scanner, so it does not belong beside Promptfoo and TextGrad. Mentioning MCP or A2A does not make it a prompt-optimization tool.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 0a25317. Configure here.

@verixiaapps

Copy link
Copy Markdown
Author

Closing — inclusion requires a public GitHub repo and HostDeFi is a hosted service (private source), so it can't qualify. Correct call by the review bot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant