Security audit
Security checks across malware telemetry and agentic risk
This skill is openly designed to rent out a Claude subscription, but it should be reviewed carefully because it imports local Claude credentials and installs a local marketplace daemon through a remote script.
Install only if you intentionally want asale to import a Claude subscription credential and offer that subscription on a market. Review the installer source/release, prefer a manual verified install if available, run discovery before import, confirm exactly which account will be imported, set conservative price/concurrency/daily limits, and verify in the asale UI that selling can be disabled.
再开一次。 凭证按这个顺序取本机有的那个：macOS 钥匙串条目 `Claude Code-credentials`、 `~/.claude/.credentials.json`、以及 opencode 的 `~/.local/share/opencode/auth.json` （它的 `anthropic` OAuth 项就是同一个 Claude 订阅，只是从另一个前门进的）。两处存的是 同一次登录时，token 指纹相同，会合并成一个账号而不是显示成两个。 ## 使用方法
again for that. The credential is whichever of these this machine has, in this order: the macOS keychain entry `Claude Code-credentials`, `~/.claude/.credentials.json`, and opencode's `~/.local/share/opencode/auth.json` (its `anthropic` OAuth entry is the same Claude subscription reached through a different front door). Two stores holding the same login share a token fingerprint and merge into one
again for that. The credential is whichever of these this machine has, in this order: the macOS keychain entry `Claude Code-credentials`, `~/.claude/.credentials.json`, and opencode's `~/.local/share/opencode/auth.json` (its `anthropic` OAuth entry is the same Claude subscription reached through a different front door). Two stores holding the same login share a token fingerprint and merge into one
name: asale-sell-claude
version: 0.2.7
description: "Put a Claude Code / Claude subscription on the asale market: import it, set a price floor and a concurrency cap, and see which of its models are actually selling. 把 Claude Code / Claude 订阅挂到 asale 市场上：导入账号、设定价格底价与并发上限，并查看它的哪些模型真的在卖。"
metadata: {"clawdbot":{"emoji":"📤","requires":{"bins":["curl"]},"install":"curl -fsSL https://asale.ai/dl/install.sh | sh","installAlternative":"irm https://asale.ai/dl/install.ps1 | iex","homepage":"https://asale.ai","source":"https://github.com/asale-ai/asale","author":"asale","license":"see-repo","configLocation":"~/.asale/daemon.token","apiEndpoints":["127.0.0.1:9700"]},"openclaw":{"systemPrompt":"Drive the asale daemon at 127.0.0.1:9700 with the token from ~/.asale/daemon.token. Always run list_accounts before set_account_sell for provider claude, and never lower minRatio without asking."}}
---
# asale-sell-claudename: asale-sell-claude
version: 0.2.7
description: "Put a Claude Code / Claude subscription on the asale market: import it, set a price floor and a concurrency cap, and see which of its models are actually selling. 把 Claude Code / Claude 订阅挂到 asale 市场上：导入账号、设定价格底价与并发上限，并查看它的哪些模型真的在卖。"
metadata: {"clawdbot":{"emoji":"📤","requires":{"bins":["curl"]},"install":"curl -fsSL https://asale.ai/dl/install.sh | sh","installAlternative":"irm https://asale.ai/dl/install.ps1 | iex","homepage":"https://asale.ai","source":"https://github.com/asale-ai/asale","author":"asale","license":"see-repo","configLocation":"~/.asale/daemon.token","apiEndpoints":["127.0.0.1:9700"]},"openclaw":{"systemPrompt":"Drive the asale daemon at 127.0.0.1:9700 with the token from ~/.asale/daemon.token. Always run list_accounts before set_account_sell for provider claude, and never lower minRatio without asking."}}
---
# asale-sell-claudeVirusTotal findings are pending for this skill version.
No suspicious patterns detected.