Security audit
Security checks across malware telemetry and agentic risk
This skill is clearly about selling a Codex or ChatGPT subscription, but it imports account credentials into a marketplace daemon and uses remote installer scripts, so users should review it carefully before installing.
Install only if you intentionally want a third-party marketplace daemon to hold and use your Codex or ChatGPT subscription credentials. Review the asale source and installer first, understand how to revoke the imported credential, and set conservative concurrency, price floor, and daily limits.
floor, and comes back when it recovers. Nothing has to be switched off and on again for that. The credential comes from the macOS keychain entry `Codex Auth` or from `~/.codex/auth.json`. Codex is the one vendor whose token will not be served without the account id that goes with it (the ChatGPT backend requires a `chatgpt-account-id` header), so the import carries that alongside the bearer —
name: asale-sell-codex
version: 0.2.7
description: "Put a Codex / ChatGPT subscription on the asale market: import it, set a price floor and a concurrency cap, and see which of its models are actually selling. 把 Codex / ChatGPT 订阅挂到 asale 市场上：导入账号、设定价格底价与并发上限，并查看它的哪些模型真的在卖。"
metadata: {"clawdbot":{"emoji":"📤","requires":{"bins":["curl"]},"install":"curl -fsSL https://asale.ai/dl/install.sh | sh","installAlternative":"irm https://asale.ai/dl/install.ps1 | iex","homepage":"https://asale.ai","source":"https://github.com/asale-ai/asale","author":"asale","license":"see-repo","configLocation":"~/.asale/daemon.token","apiEndpoints":["127.0.0.1:9700"]},"openclaw":{"systemPrompt":"Drive the asale daemon at 127.0.0.1:9700 with the token from ~/.asale/daemon.token. Always run list_accounts before set_account_sell for provider codex, and never lower minRatio without asking."}}
---
# asale-sell-codexname: asale-sell-codex
version: 0.2.7
description: "Put a Codex / ChatGPT subscription on the asale market: import it, set a price floor and a concurrency cap, and see which of its models are actually selling. 把 Codex / ChatGPT 订阅挂到 asale 市场上：导入账号、设定价格底价与并发上限，并查看它的哪些模型真的在卖。"
metadata: {"clawdbot":{"emoji":"📤","requires":{"bins":["curl"]},"install":"curl -fsSL https://asale.ai/dl/install.sh | sh","installAlternative":"irm https://asale.ai/dl/install.ps1 | iex","homepage":"https://asale.ai","source":"https://github.com/asale-ai/asale","author":"asale","license":"see-repo","configLocation":"~/.asale/daemon.token","apiEndpoints":["127.0.0.1:9700"]},"openclaw":{"systemPrompt":"Drive the asale daemon at 127.0.0.1:9700 with the token from ~/.asale/daemon.token. Always run list_accounts before set_account_sell for provider codex, and never lower minRatio without asking."}}
---
# asale-sell-codexVirusTotal findings are pending for this skill version.
No suspicious patterns detected.