AgentAPI

PassAudited by ClawScan on May 1, 2026.

Overview

This is a documentation-only directory skill with disclosed external API examples and optional payment information, with no code, install step, required credentials, or hidden behavior shown.

This skill appears safe to install as a documentation-only AgentAPI directory helper. Be careful if you choose to implement the optional x402 paid API flow: require explicit user confirmation, verify the recipient address, and set spending limits before any payment.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used, the agent may make network requests to AgentAPI endpoints to retrieve directory results.

Why it was flagged

The skill gives command-line examples for querying an external API directory. This is consistent with the browsing/search purpose and does not show automatic or hidden execution.

Skill content
curl https://agentapihub.com/api/v1/apis
Recommendation

Use the directory queries only when you want the agent to search AgentAPI, and review any API recommendations before adopting them.

What this means

Using the paid x402 APIs could spend funds from a configured wallet if a user or agent implements payment handling.

Why it was flagged

The skill documents optional paid API access involving a wallet and USDC. This is financially sensitive, but the artifact clearly describes it as optional and includes safeguards.

Skill content
Some APIs are available through **x402** — a pay-per-use protocol using USDC on Base chain.
Recommendation

Do not enable automated x402 payments unless you set explicit confirmation flows, recipient verification, and spending limits.