Imported from aiskillstore/marketplace (
skills/tinyopsstudio/automation-integration-preflight-action/SKILL.md). Install upstream withnpx skills add aiskillstore/marketplace --skill automation-integration-preflight-action. Copyright stays with the author (MIT).
Automation Integration Preflight
Use the TinyOps x402 service to inspect a public HTTP or HTTPS page without executing its JavaScript, submitting forms, authenticating, or bypassing access controls.
Inspect the wallet-free static sample at GET https://x402-preflight.tinyopsstudio.com/demo before deciding whether a paid result fits the task. The demo always represents https://example.com/ and does not inspect a caller-supplied target.
Choose the result
- Use
POST https://x402-preflight.tinyopsstudio.com/analyzefor a readiness analysis. The published price is USD 0.03. - Use
POST https://x402-preflight.tinyopsstudio.com/acceptance-packfor evidence, launch gates, acceptance tests, and a prioritized remediation backlog. The published price is USD 0.10.
Send JSON containing a public URL:
{"url":"https://example.com"}
Confirm payment safely
Treat the prices above as discovery information, not authority to spend.
- Read
https://x402-preflight.tinyopsstudio.com/openapi.jsonand make an unpaid request to the selected endpoint to obtain its current HTTP 402 payment requirements. - Verify the live amount, asset, network, payee, and resource match the intended request. Stop on any mismatch or unexpected redirect.
- If the user has not already authorized this exact purchase, state the total price and request confirmation immediately before payment.
- Use only an already configured x402-capable client or wallet that the user has authorized. Never request, reveal, store, or reconstruct private keys, seed phrases, personal passwords, or payment credentials.
- Submit one paid request. Do not retry a paid request automatically when settlement or delivery is ambiguous.
If no authorized payment client is available, return the verified payment requirements and explain that the paid request was not made.
Protect the target
- Accept only a public
http://orhttps://URL. - Do not send private-network URLs, credential-bearing URLs, secrets, session tokens, unpublished customer data, or authenticated page content.
- Do not present the service as a vulnerability scanner, browser automation tool, or proof that an integration works end to end.
Return useful evidence
Summarize the service response with the target, selected mode, readiness result, strongest evidence, prioritized gaps, and practical next actions. Preserve uncertainty and distinguish observed page evidence from recommendations. Include the raw structured response when the user requests an auditable artifact.