x402 Agent Marketplace

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill asks users to send SOL to a fixed wallet for a marketplace whose server code is not included in the package.

Treat this as review-needed before use. Do not send SOL or run any externally obtained server files unless the author provides the missing code, clear dependency pins, consistent provenance, and verifiable payment/service behavior.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may need to obtain or run unreviewed external files before the skill works, and the advertised payment server cannot be validated from this package.

Why it was flagged

The skill instructs users to install dependencies and run server.py, but the supplied manifest contains only skill.json and SKILL.md, so the runnable marketplace code and dependencies cannot be reviewed.

Skill content
pip install -r requirements.txt
python server.py
Recommendation

Do not run external files for this skill until the package includes the referenced server.py and requirements.txt, pins dependencies, and provides consistent source/version information.

What this means

A user could send irreversible SOL payments to the listed address without being able to verify that the promised marketplace service or revenue model exists.

Why it was flagged

The documentation makes trust-sensitive revenue and custody claims while directing payments to a fixed wallet, but no included implementation shows payment verification, revenue sharing, or service delivery.

Skill content
**90% Revenue Share** ... **Zero Custody** ... **Send SOL** to: `4D8jCkTMWjaQzDuZkwibk8ML34LSCKVCKS8kC6RFYuX`
Recommendation

Verify the source code, payment recipient, service delivery, and refund/revenue-share mechanics before sending any SOL.