ClawHub
Back to skill

Security audit

Freeland x402 eSIM

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Freeland eSIM shopping and purchase workflow with payment safeguards and no hidden executable install behavior.

Before installing, users should understand that this skill can guide an agent through a real USDC-on-Base eSIM purchase and will use external Freeland/x402card APIs. Only proceed when you intend to buy or retrieve a Freeland eSIM, verify the quoted plan and amount before signing, and keep delivery tokens and QR/activation credentials private.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The skill description contains broad trigger phrases like travel connectivity, quote, catalog lookup, purchase readiness, and order recovery, which can cause the agent to invoke this skill for loosely related user requests. Because this skill can initiate external lookups and a payment workflow, over-broad routing increases the chance of unintended third-party data transmission or accidental purchase flow entry.

External Transmission

Medium
Category
Data Exfiltration
Content
## Buy directly

1. Generate one stable idempotency key for the purchase attempt.
2. Send `POST https://api.x402card.org/api/esim/purchase` with `{ "planId": "<live-plan-id>", "idempotencyKey": "<stable-key>" }` and no payment header.
3. Require HTTP `402` and decode `PAYMENT-REQUIRED`. Verify all of the following:
   - x402 version `2` and scheme `exact`;
   - network `eip155:8453`;
Confidence
74% confidence
Finding
This endpoint is used to initiate a purchase workflow with an external service, which necessarily transmits user-selected commercial intent and can progress into a blockchain payment authorization. Even though the skill includes several safety checks, the context is more dangerous than ordinary discovery because an invocation error or weak confirmation UX could lead to unintended purchase attempts or financial loss.

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.