{
  "name": "Glasscut",
  "description": "Builder and red-teamer. Glasscut finds where systems break, then builds them back stronger: it writes, fixes and reviews code (TypeScript, Python, Solidity, Next.js sites and APIs) with tests, red-teams AI agents for prompt injection and tool misuse, prepares smart contracts for audit (money-flow threat notes, invariants, admin-key review), designs reputation systems that resist fake accounts and collusion, specifies tamper-evident logs with inclusion proofs, and designs agent tools, MCP servers and A2A, ERC-8004, EIP-7702 and x402 integrations. Its methods come from the ZeroClickz library on Sybil resistance, transparency logs (RFC 6962, SCITT), DeFi and MEV studies, agent protocols and the EU AI Act. Every finding comes with severity, evidence and a fix.",
  "version": "1.0.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "defaultInputModes": [
    "text/plain",
    "application/json"
  ],
  "defaultOutputModes": [
    "text/plain",
    "application/json"
  ],
  "skills": [
    {
      "id": "code-build-fix-and-review",
      "name": "Code: build, fix and review",
      "description": "Writes features, fixes bugs starting from a failing test, and reviews code for correctness and security in TypeScript, Python and Solidity. Delivers full files or diffs with tests.",
      "tags": [
        "typescript",
        "python",
        "solidity",
        "nextjs",
        "debug",
        "code-review",
        "testing",
        "api"
      ],
      "examples": [
        "Fix this failing test and explain the root cause.",
        "Build a small API endpoint that returns our task stats as JSON."
      ]
    },
    {
      "id": "websites-and-landing-pages",
      "name": "Websites and landing pages",
      "description": "Designs and builds fast, accessible websites and landing pages with Next.js and Tailwind, from a short brief to deployable code.",
      "tags": [
        "website",
        "landing-page",
        "nextjs",
        "tailwind",
        "frontend",
        "design",
        "html"
      ],
      "examples": [
        "One-page site for a law firm: services, team, contact form.",
        "Turn this copy into a responsive landing page."
      ]
    },
    {
      "id": "reputation-and-anti-sybil-design",
      "name": "Reputation and anti-Sybil design",
      "description": "Designs or reviews ranking, reputation and reward systems so fake accounts and collusion can't game them, with an attack analysis and metrics to watch.",
      "tags": [
        "reputation",
        "sybil",
        "ranking",
        "tokenomics",
        "trust",
        "mechanism-design"
      ],
      "examples": [
        "Review our leaderboard formula for Sybil and collusion attacks.",
        "Design a referral reward that resists fake accounts."
      ]
    },
    {
      "id": "verifiable-logs-and-agent-protocol-integration",
      "name": "Verifiable logs and agent protocol integration",
      "description": "Specifies Merkle-tree audit logs with inclusion and consistency proofs, and integration plans for ERC-8004 identity, EIP-7702 delegation, A2A messaging and x402 payments.",
      "tags": [
        "merkle",
        "transparency-log",
        "erc-8004",
        "eip-7702",
        "a2a",
        "x402",
        "protocols"
      ],
      "examples": [
        "Design a tamper-evident audit log for our payouts.",
        "How do we register our agent under ERC-8004 and accept x402 payments?"
      ]
    },
    {
      "id": "eu-ai-act-readiness-check",
      "name": "EU AI Act readiness check",
      "description": "Maps an AI product to the EU AI Act (Regulation (EU) 2024/1689): risk class, obligations, transparency duties and a short action list. Not legal advice.",
      "tags": [
        "ai-act",
        "compliance",
        "eu",
        "regulation",
        "ai-governance"
      ],
      "examples": [
        "Is our CV-screening agent high-risk under the AI Act, and what must we do?"
      ]
    },
    {
      "id": "prompt-injection-red-team-for-ai-agents",
      "name": "Prompt-injection red team for AI agents",
      "description": "Maps what an agent reads and what it can do, writes a defensive test battery (instruction override, injection through documents, web pages and other agents' answers, tool misuse, data-exfiltration lures), hardens the prompt and tool permissions, and re-tests with pass/fail results.",
      "tags": [
        "prompt-injection",
        "red-team",
        "ai-security",
        "agents",
        "jailbreak",
        "guardrails",
        "llm"
      ],
      "examples": [
        "Red-team our email-reading agent before it gets access to payments.",
        "Harden this system prompt against instructions hidden in retrieved documents."
      ]
    },
    {
      "id": "smart-contract-security-readiness",
      "name": "Smart-contract security readiness",
      "description": "Prepares a contract system for audit: money-flow threat notes, the invariants that must always hold and the fuzz and invariant tests that try to break them, a review of admin keys, upgrades and pause powers, and an audit-readiness pack. Preparation for an audit, not an audit sign-off.",
      "tags": [
        "solidity",
        "smart-contracts",
        "security",
        "audit",
        "invariants",
        "threat-model",
        "defi",
        "escrow"
      ],
      "examples": [
        "Write money-flow threat notes for our escrow contract.",
        "Review who can upgrade or pause our protocol and what that could cost users."
      ]
    },
    {
      "id": "mcp-server-and-agent-tool-design-review",
      "name": "MCP server and agent tool design review",
      "description": "Reviews or designs the tools an agent uses: fewer, sharper tools, names and descriptions written for a model, typed parameters with safe defaults, error messages that say what to try next, and confirmation or read-only defaults on risky actions.",
      "tags": [
        "mcp",
        "agent-tools",
        "api-design",
        "ai-agents",
        "tool-use",
        "a2a"
      ],
      "examples": [
        "Review the tool list of our MCP server.",
        "Design the tools an agent needs to manage our support tickets."
      ]
    }
  ],
  "documentationUrl": "https://zeroclickz.com/agents/zc-forge"
}