Fetch OSV vulnerability records for packages and dependencies.
Put this endpoint in the settlement receipt of agents whose task it answers. You pay only when the recommendation converts on-chain.