Antseed Explorer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Antseed Explorer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Live at [antfeed.org](https://antfeed.org)
An open-source, on-chain index of buyer activity on the AntSeed P2P AI services network. Provider/seller activity is already surfaced on antseed.com/network; this app fills the gap on the demand side: who is spending USDC on inference, with which providers, and how reliably.
Not affiliated with the AntSeed team.
AntseedStats.MetadataRecorded, with legacy settled-session metadata decoded only after validation.GET /api/score/[address] returns the trust score JSON for any address.cp .env.example .env # fill DATABASE_URL with a Neon DB or a local Postgres
npm install
npm run db:push # apply schema to your DB
npm run dev| Script | What it does |
|---|---|
npm run dev | Local Next.js dev server |
npm run build | Production build |
npm run db:generate | Diff schema and emit a new migration in drizzle/ |
npm run db:push | Apply schema directly (dev-only, no migration history) |
npm run db:migrate | Apply pending migrations from drizzle/ |
npm run db:studio | Open Drizzle Studio for browsing the DB |
npm run sync | Run a one-shot indexer pass against the configured DB |
npm run sync loop | Loop until caught up to chain head |
| var | default | meaning |
|---|---|---|
DATABASE_URL | required | Postgres connection string. |
RPC_URL | https://base.drpc.org | Base RPC. DRPC and Tenderly free tiers allow large eth_getLogs ranges. |
CHAIN_ID | 8453 | 8453 Base mainnet, 84532 Base Sepolia. |
CRON_SECRET | none | Required in production. Cron requests must send Authorization: Bearer <CRON_SECRET>. |
LOG_BATCH_SIZE | 2000 | Max blocks per getLogs. Indexer auto-shrinks if RPC complains. |
CHANNELS_ADDRESS | 0xBA66d3b4f... | Override only if you've forked to a different contract. |
START_BLOCK | deployment block | First block to index from. |
Core settlement contract: `AntseedChannels` on Base mainnet, 0xBA66d3b4fbCf472F6F11D6F9F96aaCE96516F09d, deployed at block 45,667,842. Auxiliary indexers also read AntseedStats, ANTS, staking, deposits, and identity events for token accounting, holder state, DAU, and address enrichment.
| event | semantic |
|---|---|
Reserved | session opened (buyer locks maxAmount for a seller). |
ChannelSettled | seller called settle; delta USDC moved this batch. metadata is seller-provided opaque bytes and is stored only after validation. |
MetadataRecorded | authorized stats writer recorded per-inference input/output tokens and request count; canonical source for network token totals. |
ChannelClosed | channel closed. settledAmount=0 + no prior ChannelSettled → ghost. |
ChannelTopUp | buyer added more deposit to an existing channel. |
ChannelWithdrawn | buyer pulled refund. |
CloseRequested | grace-period close started. |
Per-buyer aggregates are recomputed in SQL on every sync — no event replay needed for score recomputes. The indexer runs reconcileDrift() after each pass to catch rare partial-sync races.
lib/score.ts, 0–100, four sub-scores:
log10(USDC + 1) / log10(100) × 30. $100 settled = 30.log10(sessions + 1) / log10(50) × 25.<3 unique sellers = 0; 3 = 10; 10+ = 25.settled / (settled + ghost) × 20.A buyer with ≥3 distinct settled sellers earns the Qualified Proven Sign badge.
GET /api/stats Network aggregates + 30d daily series
GET /api/buyers?limit=&offset=&qualified=&minScore=&sort=
GET /api/buyers/{address} Buyer detail + sessions + top sellers
GET /api/score/{address} Trust score JSON
POST /api/sync?force=1 Manual indexer pass (Bearer sync secret required)/api/score/{address} example:
{
"address": "0x…",
"score": 73,
"tier": "trusted",
"qualified": true,
"breakdown": {
"total": 73,
"volume": 24.1,
"consistency": 18.0,
"diversity": 18.6,
"reliability": 12.0,
"qualified": true
},
"stats": { "…": "raw indexed counters" }
}vercel.json runs /api/cron/syncevery five minutes; do not add an external minute-level cron for the same endpoint.
/api/cron/hero is an authenticated manual repair endpoint only. Call itwith ?repair=1 after confirming /api/cron/sync cannot refresh the hero snapshot.
API_RUNTIME_BASE_URL=http://localhost:3000 npm run test:api-runtime and CSP_RUNTIME_URL=http://localhost:3000 npm run test:csp-runtime.
npm run check:rate-limit-storage; otherwise the app falls back to per-instance limits until the table exists.
antseed-explorer/
app/
layout.tsx # nav + Sync button
page.tsx # / overview + top 10
buyers/page.tsx # /buyers leaderboard
buyers/[address]/page.tsx # buyer detail
api/
cron/sync/route.ts # cron-driven indexer pass
sync/route.ts # authenticated manual sync endpoint
buyers/route.ts
buyers/[address]/route.ts
stats/route.ts
score/[address]/route.ts
components/ # Charts, Badges, CopyButton, UI helpers
lib/
schema.ts # Drizzle Postgres schema
db.ts # Neon HTTP client + state helpers
queries.ts # all reads used by pages/APIs
indexer.ts # getLogs loop, ghost detection, recompute, reconcile
antseed.ts # contract addresses + ABI
chain.ts # viem client
score.ts # Buyer Trust Score
format.ts
scripts/
sync-cli.ts # local CLI sync against DATABASE_URL
drizzle/ # generated migrations
vercel.json # cron config + maxDurationIssues and PRs are welcome. The most useful contributions right now:
Open an issue to discuss before submitting a large change.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.