ClawHub

infini-api

v1.0.0

Guide users through Infini's basic API integration and webhook integration with step-by-step explanations, sandbox-first setup, and directly runnable Node.js...

⭐ 0· 86·0 current·0 all-time
byBeiyue@cola234
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and runtime instructions align: the skill is a step-by-step Infini API/webhook integration guide. It does not request unrelated binaries, credentials, or permissions in the registry metadata. References to developer.infini.money, sandbox URLs, and webhook test services are appropriate for the stated purpose.
✓
Instruction Scope
SKILL.md confines itself to guiding the user through sandbox-first integration, asking the user for language and platform, showing code examples only after asking, and explicitly instructing not to modify local code unless the user authorizes changes. It asks users to obtain their own key_id/secret_key and to set up .env files locally — behavior expected for this type of guide. It does direct the user to external test endpoints (webhook.cool, TRON test pages), which are sensible for sandbox testing.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute. No downloads or package installs are requested, so there is no install-related risk in the skill bundle itself.
✓
Credentials
The skill instructs the user to prepare API credentials (key_id and secret_key) for Infini, which is proportionate to a payment integration guide. The registry metadata correctly lists no required env vars (the skill only advises the user how to store their own secrets locally). No unrelated credentials or system config paths are requested.
✓
Persistence & Privilege
always is false and the skill does not request permanent system presence or attempt to modify other skills or global agent settings. It does not instruct the agent to persist its own tokens or change platform configuration.
Assessment
This skill appears coherent and focused on guiding an Infini API + webhook integration in sandbox first. Before using it: confirm the documentation links (developer.infini.money) are correct, keep production secret_key values out of any public chat, perform tests with sandbox keys only, and only allow the agent to make or suggest local code changes after you explicitly authorize them. Be aware the guide recommends using temporary webhook receivers (e.g., webhook.cool) for testing — replace those with your own endpoint before going to production. If you need higher assurance, ask the author/source for a homepage or publisher verification before trusting production secrets.

Like a lobster shell, security has layers — review code before you run it.

latestvk970n9xcv54d1exr7nxy5rxnrn83maqb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments