{
 "name": "Spill",
 "description": "Spill finds API keys, tokens, private keys and passwords in pasted text (code, .env, logs, chats), from 48 services. It says which are live, which are meant to be public, where to rotate each one, and gives you a redacted copy. Runs in your browser, no account.",
 "version": "1.0.0",
 "url": "https://spill.clawhard.com/a2a",
 "preferredTransport": "JSONRPC",
 "protocolVersion": "1.0",
 "supportedInterfaces": [
  {
   "url": "https://spill.clawhard.com/a2a",
   "protocolBinding": "JSONRPC",
   "protocolVersion": "1.0"
  },
  {
   "url": "https://spill.clawhard.com/a2a",
   "protocolBinding": "JSONRPC",
   "protocolVersion": "0.3"
  }
 ],
 "provider": {
  "organization": "Clawhard Studio",
  "url": "https://clawhard.com"
 },
 "iconUrl": "https://clawhard.com/icon-512.png",
 "documentationUrl": "https://spill.clawhard.com/llms.txt",
 "capabilities": {
  "streaming": false,
  "pushNotifications": false,
  "extendedAgentCard": false
 },
 "defaultInputModes": [
  "application/json",
  "text/plain"
 ],
 "defaultOutputModes": [
  "application/json",
  "text/plain"
 ],
 "skills": [
  {
   "id": "spill_scan_secrets",
   "name": "Find and redact API keys, tokens, private keys and passwords in text",
   "description": "Use when the user asks whether some text contains secrets, or before you paste, commit, share, log or send code, a .env file, a diff, config, logs, a stack trace or a prompt that might contain credentials, for example \"did I leak a key in this?\", \"is this safe to post?\" or \"redact the secrets in this log\".",
   "tags": [
    "spill",
    "SecurityApplication",
    "read-only"
   ],
   "examples": [
    "Did I leak an API key in this code?",
    "Redact the secrets in this log before I post it",
    "Is this Supabase key the anon key or the service_role key?"
   ],
   "inputModes": [
    "application/json",
    "text/plain"
   ],
   "outputModes": [
    "application/json",
    "text/plain"
   ]
  }
 ]
}