
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@scoutscore/plugin-eliza
Advanced tools
Scout trust intelligence plugin for ElizaOS - x402 service verification, skill scanning, and transaction safety for AI agents
Scout trust intelligence plugin for ElizaOS - gives your agent the ability to verify x402 services, scan skills for security issues, and make trust-aware transaction decisions.
Plus automatic trust context injection and transaction safety guards.
npm install @scoutscore/plugin-eliza
Add the plugin to your ELIZA agent's character file:
{
"plugins": ["@scoutscore/plugin-eliza"]
}
Or register it programmatically:
import { scoutPlugin } from "@scoutscore/plugin-eliza";
const agent = new AgentRuntime({
plugins: [scoutPlugin],
// ...
});
Set these environment variables (all optional - sensible defaults provided):
| Variable | Default | Description |
|---|---|---|
SCOUT_API_URL | https://scoutscore.ai | Scout API base URL |
SCOUT_MIN_SERVICE_SCORE | 50 | Minimum trust score for x402 payments |
SCOUT_AUTO_REJECT_FLAGS | WALLET_SPAM_FARM,TEMPLATE_SPAM,ENDPOINT_DOWN | Auto-reject flags |
SCOUT_CACHE_TTL | 30 | Cache TTL in minutes |
SCOUT_WATCHED_DOMAINS | (empty) | Comma-separated domains to monitor |
SCOUT_WATCH_INTERVAL | 60 | Monitor check interval in minutes |
SCOUT_API_KEY | (empty) | API key for authenticated endpoints |
Your agent responds to natural language:
"Is recoupable.com trustworthy?"
The agent calls Scout's API and responds with:
The trust-context provider automatically injects trust data about any domain mentioned in conversation. The LLM sees this context without the user needing to explicitly ask:
Trust context for recoupable.com: Score 100/100 (HIGH).
Pillars: Contract 100, Availability 100, Fidelity 100, Safety 70.
Verdict: RECOMMENDED (max $5,000). Health: UP (57ms).
The transaction-guard evaluator watches for payment-related messages. If a user tries to pay an untrusted service, the agent warns or blocks:
Transaction BLOCKED: sketchy-api.xyz (score 18/100, VERY_LOW)
has auto-reject flags: ENDPOINT_DOWN, WALLET_SPAM_FARM.
This service is not safe for x402 payments.
| Score | Level | Verdict | Max Transaction |
|---|---|---|---|
| >= 75 | HIGH | RECOMMENDED | $5,000 |
| >= 50 | MEDIUM | USABLE | $1,000 |
| >= 25 | LOW | CAUTION | $100 |
| < 25 | VERY_LOW | NOT_RECOMMENDED | $0 |
This plugin calls the Scout hosted API. All scoring endpoints are free during the launch period. The plugin uses aggressive caching (30-min TTL by default) to minimize API calls.
MIT
FAQs
Scout trust intelligence plugin for ElizaOS - x402 service verification, skill scanning, and transaction safety for AI agents
The npm package @scoutscore/plugin-eliza receives a total of 6 weekly downloads. As such, @scoutscore/plugin-eliza popularity was classified as not popular.
We found that @scoutscore/plugin-eliza demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.