{"id":"archive-preflight","title":"Archive extraction preflight: zip-slip, duplicate destinations, symlink conflicts","description":"Checks a manifest of up to 2000 archive entries (path, type, link target, sizes) before extraction, for an agent that unpacks zip, tar or OOXML files: ../ traversal (also through backslashes), absolute, drive-letter and UNC paths, entries that write through a symlink, symlink and hardlink targets that leave the root, duplicate destinations, case-only and NFC/NFD collisions, Windows reserved names, and declared-size limits. It reads only the manifest you supply: it does not open or decompress the archive, check file contents, or know the extractor's own sanitising, so a pass means the manifest has no listed hazard.","roi":"Zip-slip and symlink write-through are how an archive overwrites files outside the target folder. The check runs on the file list before anything is written.","audience":"developer","package":"infra-preflight-kit","channels":["x402","mcp"],"endpoint":{"method":"POST","url":"https://agents.writerslogic.com/api/v1/archive-preflight","path":"/api/v1/archive-preflight","contentType":"application/json"},"price":{"amount":"0.005","currency":"USDC","network":"base","perCall":true,"failedCallsCharged":false},"inputSchema":{"type":"object","additionalProperties":false,"required":["entries"],"properties":{"entries":{"type":"array","minItems":1,"maxItems":2000,"items":{"type":"object","required":["path"],"properties":{"path":{"type":"string","minLength":1,"maxLength":1024,"description":"Entry name exactly as stored in the archive."},"type":{"type":"string","enum":["file","dir","symlink","hardlink"],"description":"Default: dir when the name ends with /, else file."},"linkTarget":{"type":"string","maxLength":1024,"description":"Required for symlink and hardlink entries."},"size":{"type":"integer","minimum":0,"maximum":9007199254740991,"description":"Uncompressed size in bytes."},"compressedSize":{"type":"integer","minimum":0,"maximum":9007199254740991}}},"description":"At most 200000 characters of paths and link targets in total."},"targets":{"type":"array","maxItems":3,"items":{"type":"string","enum":["windows","macos","linux"]},"description":"Filesystems to check collisions and name rules for. Default: windows, macos and linux."},"destinationRoot":{"type":"string","maxLength":1024,"description":"Extraction directory; counted towards total path length."},"limits":{"type":"object","properties":{"maxEntries":{"type":"integer","minimum":0},"maxTotalBytes":{"type":"integer","minimum":0,"maximum":9007199254740991},"maxExpansionRatio":{"type":"number","minimum":0}}}}},"resultSchema":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"checked":{"type":"integer"},"targets":{"type":"array","items":{"type":"string"}},"findings":{"type":"array","description":"Capped at 100. Errors make the status fail; warnings do not.","items":{"type":"object","properties":{"rule":{"type":"string"},"severity":{"type":"string"},"index":{"type":"integer"},"path":{"type":"string"},"target":{"type":"string"},"detail":{"type":"string"}}}},"findingCount":{"type":"integer"},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"outputSchema":{"type":"object","properties":{"data":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"checked":{"type":"integer"},"targets":{"type":"array","items":{"type":"string"}},"findings":{"type":"array","description":"Capped at 100. Errors make the status fail; warnings do not.","items":{"type":"object","properties":{"rule":{"type":"string"},"severity":{"type":"string"},"index":{"type":"integer"},"path":{"type":"string"},"target":{"type":"string"},"detail":{"type":"string"}}}},"findingCount":{"type":"integer"},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"_provenance":{"type":"object","description":"C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance"}},"required":["data","_provenance"]},"example":{"entries":[{"path":"app/","type":"dir"},{"path":"app/run.sh","type":"file","size":120},{"path":"app/Run.sh","type":"file","size":90},{"path":"app/link","type":"symlink","linkTarget":"../../etc"},{"path":"app/link/passwd","type":"file","size":5},{"path":"..\\..\\evil.dll","type":"file","size":1}]},"openapiOperation":{"operationId":"archive_preflight","summary":"Archive extraction preflight: zip-slip, duplicate destinations, symlink conflicts","description":"Checks a manifest of up to 2000 archive entries (path, type, link target, sizes) before extraction, for an agent that unpacks zip, tar or OOXML files: ../ traversal (also through backslashes), absolute, drive-letter and UNC paths, entries that write through a symlink, symlink and hardlink targets that leave the root, duplicate destinations, case-only and NFC/NFD collisions, Windows reserved names, and declared-size limits. It reads only the manifest you supply: it does not open or decompress the archive, check file contents, or know the extractor's own sanitising, so a pass means the manifest has no listed hazard.\n\nPrice: 0.005 USDC on Base (x402).","x-x402-price-usdc":"0.005","x-x402-amount":"5000","x-payment-info":{"protocols":["x402"],"price":{"mode":"fixed","currency":"USD","amount":"0.005"}},"x-audience":"developer","x-sample-url":"https://agents.writerslogic.com/api/v1/samples/archive-preflight","security":[{"x402":[]},{"apiKey":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["entries"],"properties":{"entries":{"type":"array","minItems":1,"maxItems":2000,"items":{"type":"object","required":["path"],"properties":{"path":{"type":"string","minLength":1,"maxLength":1024,"description":"Entry name exactly as stored in the archive."},"type":{"type":"string","enum":["file","dir","symlink","hardlink"],"description":"Default: dir when the name ends with /, else file."},"linkTarget":{"type":"string","maxLength":1024,"description":"Required for symlink and hardlink entries."},"size":{"type":"integer","minimum":0,"maximum":9007199254740991,"description":"Uncompressed size in bytes."},"compressedSize":{"type":"integer","minimum":0,"maximum":9007199254740991}}},"description":"At most 200000 characters of paths and link targets in total."},"targets":{"type":"array","maxItems":3,"items":{"type":"string","enum":["windows","macos","linux"]},"description":"Filesystems to check collisions and name rules for. Default: windows, macos and linux."},"destinationRoot":{"type":"string","maxLength":1024,"description":"Extraction directory; counted towards total path length."},"limits":{"type":"object","properties":{"maxEntries":{"type":"integer","minimum":0},"maxTotalBytes":{"type":"integer","minimum":0,"maximum":9007199254740991},"maxExpansionRatio":{"type":"number","minimum":0}}}}},"example":{"entries":[{"path":"app/","type":"dir"},{"path":"app/run.sh","type":"file","size":120},{"path":"app/Run.sh","type":"file","size":90},{"path":"app/link","type":"symlink","linkTarget":"../../etc"},{"path":"app/link/passwd","type":"file","size":5},{"path":"..\\..\\evil.dll","type":"file","size":1}]}}}},"responses":{"200":{"description":"Paid result with provenance","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"checked":{"type":"integer"},"targets":{"type":"array","items":{"type":"string"}},"findings":{"type":"array","description":"Capped at 100. Errors make the status fail; warnings do not.","items":{"type":"object","properties":{"rule":{"type":"string"},"severity":{"type":"string"},"index":{"type":"integer"},"path":{"type":"string"},"target":{"type":"string"},"detail":{"type":"string"}}}},"findingCount":{"type":"integer"},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"_provenance":{"type":"object","description":"C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance"}},"required":["data","_provenance"]}}}},"400":{"description":"Invalid request (no payment consumed)","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}},"401":{"description":"Invalid X-API-KEY","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}},"402":{"description":"Payment required or invalid","content":{"application/json":{"schema":{"type":"object","description":"x402 v2 PaymentRequired (also base64 in the PAYMENT-REQUIRED header)","properties":{"x402Version":{"type":"integer"},"error":{"type":"string"},"code":{"type":"string"},"resource":{"type":"object"},"accepts":{"type":"array","items":{"type":"object"}},"extensions":{"type":"object"}}}}}},"502":{"description":"Upstream failure; the payment is released or not settled","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}}}},"links":{"docs":"https://agents.writerslogic.com/docs/archive-preflight/","docsJson":"https://agents.writerslogic.com/docs/archive-preflight.json","sample":"https://agents.writerslogic.com/api/v1/samples/archive-preflight","openapi":"https://agents.writerslogic.com/openapi.json","catalog":"https://agents.writerslogic.com/api/v1/catalog","verifyProvenance":"https://agents.writerslogic.com/api/v1/verify-provenance","index":"https://agents.writerslogic.com/docs/index.json"}}