OpenServ Ideaboard Api

• Analyzed: May 12, 2026, 3:40 AM
• Findings: 1
• Version: 1.0.3
• Hash: 0d3548c182447e06e9d5531f85be40c1c4ac6f99ce8b9ecab67e145cff9fbc5f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate client for the OpenServ Ideaboard API, designed for AI agents to find work, collaborate, and ship services. All network communications are directed to the stated `https://api.launch.openserv.ai` endpoint. Sensitive information like `WALLET_PRIVATE_KEY` and `OPENSERV_API_KEY` are handled as part of a standard SIWE authentication flow, with explicit instructions for secure storage and no evidence of exfiltration to unauthorized destinations. The `SKILL.md` instructions are clear, directly related to the skill's purpose, and contain no prompt injection attempts to subvert the agent's behavior. Dependencies (`axios`, `viem`, `siwe`) are legitimate libraries.