---
skill_id: trust-fleet-catalog-scanner
evaluation: free
price_usd_full: 1.99
challenge: https://lvlltd.com/api/pay?skill=trust-fleet-catalog-scanner
outline: https://lvlltd.com/skills/trust-fleet-catalog-scanner/outline.json
standards: x402, ERC-7857
---

# Free sample — Catalog Scanner (Trust Fleet)

**Skill ID:** `trust-fleet-catalog-scanner`  
**Full unlock:** $1.99 USDC via x402 on Base  
**Challenge:** https://lvlltd.com/api/pay?skill=trust-fleet-catalog-scanner  
**Outline JSON:** https://lvlltd.com/skills/trust-fleet-catalog-scanner/outline.json

## Summary

Scan and re-verify packaging Dockerfiles and detached signatures for skills that already have packaging metadata.

## When to use

- You operate a skill catalog and need continuous packaging scan/verify
- You want honest scan_status and signature_status evidence files
- You dogfood LVL packaging trust before selling packaging-gated skills

## Decision criteria (buy vs skip)

- You need this when: You operate a skill catalog and need continuous packaging scan/verify
- Budget fits: full unlock is $1.99 USDC on Base
- You can automate unlock via HTTP 402 without a browser
- You only need teaser/outline first — sealed src/ops stay locked until payment

## Outline (preview)

1. Select skills that already declare packaging (Dockerfile / sealed pack pilot).
2. Run local-first policy lint: base image, USER, secrets, network egress posture.
3. Re-check detached signature presence and algorithm against trust-fleet policy.
4. Emit a dated scan report with pass/fail/unknown — never rubber-stamp 'safe'.
5. Publish only statuses the open pipeline actually produced; missing tools → unknown.

## Capabilities (preview)

- Full capabilities listed in sealed pack after unlock

## What you get after payment

- SKILL.md (teaser public)
- agent-install.json (public meta)
- src/index.js (stub public; full after unlock)
- Full sealed: src/, schemas/, ops/* (when present) after verified X-PAYMENT

## Agent buy path (zero human UI)

```
GET  https://lvlltd.com/skills/trust-fleet-catalog-scanner/outline.json
GET  https://lvlltd.com/api/pay?skill=trust-fleet-catalog-scanner   → HTTP 402
# transfer maxAmountRequired USDC to payTo on Base
POST https://lvlltd.com/api/pay
  X-PAYMENT: {"txHash":"0x…","skill":"trust-fleet-catalog-scanner"}
# response.sealed_pack.files = full pack
```

## Sample excerpt

# Catalog Scanner (Trust Fleet)

**Price:** $1.99 USDC  
**Category:** Trust  
**Version:** 1.0.0  
**Protocols:** x402, ERC-7857  
**Tags:** trust, packaging, scan, signature, fleet, x402  

## Summary

Scan and re-verify packaging Dockerfiles and detached signatures for skills that already have packaging metadata.

## Description

First-party Trust Fleet Catalog Scanner. Local-first open pipeline component: Dockerfile policy lint + openssl verify for packaging-registered skills only. Emits evidence; never invents pass results; never touches sealed-pack unlock.

## When to use

- You operate a skill catalog and need continuous packaging scan/verify
- You want honest scan_status and signature_status evidence files
- You dogfood LVL packaging trust before selling packaging-gated skills

## After purchase (lvlltd.com)

1. Pay USDC on Base via x402 to the treasury
2. POST `/api/pay` with `X-PAYMENT: {"txHash","skill":"trust-fleet-catalog-scanner"}`
3. Receive `sealed_pack.files` (code + docs)
4. Install: `node scripts/install-unlocked-pack.mjs unlock.json ./skills`
5. `import { createSkill } from './skills/trust-fleet-catalog-scanner/src/index.js'`

## Standards

- x402 micropayments (Base USDC / USDbC)
- ERC-7857 sealed iNFT ownership record (marketplace unlock ≠ runtime design)
- Operational packages ship as sealed pack files after verified payment

## Safety

- No secrets, private keys, or exploit content
- Human escalate on high blast-radius actions
- Not legal, tax, medical, or financial advice