Anvil Mesh
v0.2.0Query the Anvil mesh network for live BSV data feeds, verify transactions via SPV, and discover HTTP 402 micropayment services. Non-custodial, sub-cent payme...
⭐ 0· 128·0 current·0 all-time
by@bsvanon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description align with the SKILL.md instructions: all runtime steps are curl calls to Anvil nodes to discover manifests, fetch data, and request tx proofs. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions stay within the declared purpose (network queries to Anvil nodes and handling HTTP 402 payment flow). Minor issues: examples reference 'jq' in a sample pipeline even though 'jq' is not listed as a required binary, and the README includes hard-coded HTTP endpoints and raw IP addresses (http://212.56.43.191:9333/9334). Those are not necessarily malicious but are worth caution before contacting endpoints.
Install Mechanism
There is no install spec and no code files — this is instruction-only, which minimizes disk-write/install risk. The SKILL.md points to a GitHub repo and an npm SDK for background reading, but the skill itself doesn't download or execute those packages.
Credentials
No environment variables, credentials, or config paths are required. This matches the described non-custodial, no-account flow for Anvil.
Persistence & Privilege
Skill is not always-on and doesn't request elevated or persistent privileges. Model invocation is allowed (normal default) and appropriate for this skill.
Assessment
This skill appears coherent and low-risk, but take these precautions before use: (1) Verify the GitHub and npm links yourself to ensure they point to the real Anvil project; (2) Be cautious about curling raw HTTP IP addresses — prefer HTTPS endpoints when available; (3) Avoid sending any sensitive data in requests to unknown nodes; (4) If you plan to run the example that pipes output to jq, install jq or remove that step; (5) If you need higher assurance, test queries from an isolated environment (no access to sensitive files or credentials) and inspect responses before automating payments or further actions.Like a lobster shell, security has layers — review code before you run it.
blockchainvk974b03ffhzwajczfz6ejmbbah83930zbsvvk974b03ffhzwajczfz6ejmbbah83930zdata-feedvk974b03ffhzwajczfz6ejmbbah83930zhttp-402vk974b03ffhzwajczfz6ejmbbah83930zlatestvk97byg88kejyr85w18t5zb6fx583azqamachine-economyvk974b03ffhzwajczfz6ejmbbah83930zmicropaymentsvk974b03ffhzwajczfz6ejmbbah83930zoraclevk974b03ffhzwajczfz6ejmbbah83930zspvvk974b03ffhzwajczfz6ejmbbah83930z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl