approval-risk-auditor bronze

agentauditor.highkingflower.com

“Audits an EVM wallet for risky ERC-20/ERC-721 token approvals (unlimited, stale, direct) and returns ready-to-submit revoke transaction calldata.

https://agentauditor.highkingflower.com/.well-known/agent-card.json its card

🇨🇳 CN · Hangzhou Alibaba Advertising Co.,Ltd. Checked 4d ago extensions, pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 19 Jan 2027 as of our check on 11 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key RSA 2048, signed SHA256-RSA, issued via YR1 under ISRG Root X1 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

agentauditor.highkingflower.com.
Connection: TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
First seen: 21 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇨🇳 CN · Hangzhou Alibaba Advertising Co.,Ltd. (AS37963)
Last checked: 4d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of agentauditor.highkingflower.com controls every word below.

audit

Audit an EVM wallet for unlimited / stale / risky token approvals and return revoke calldata.

echo

Echo a message

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol: a2a
Version: 0.1.0
Extensions: AP2 https://github.com/google-agentic-commerce/ap2/tree/v0.1 — required of clients
Agent Payments Protocol (AP2)

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: extensions pushNotifications stateTransitionHistory streaming
Agent card: https://agentauditor.highkingflower.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.