Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Agenthub

v1.0.4

Call 32 real-world APIs — flights, hotels, weather, crypto prices, DeFi yields, stock quotes, web search, geocoding, IP reputation, blockchain data, code exe...

1· 521·1 current·1 all-time
byMarcelo@marcelo-rowship

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for marcelo-rowship/rwagenthub.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Agenthub" (marcelo-rowship/rwagenthub) from ClawHub.
Skill page: https://clawhub.ai/marcelo-rowship/rwagenthub
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: AGENTHUB_WALLET_KEY
Required binaries: node, npm
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install marcelo-rowship/rwagenthub

ClawHub CLI

Package manager switcher

npx clawhub@latest install rwagenthub
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (AgentHub: gateway for 32 APIs charged via USDC on Base) aligns with declared requirements: node/npm, an AGENTHUB_WALLET_KEY, and an npm SDK (rwagenthub-sdk). Requiring a wallet key to sign micropayments is coherent with the pay-per-call design.
Instruction Scope
SKILL.md instructs the agent to install the rwagenthub-sdk into the skill workspace and to run ephemeral Node scripts that read process.env.AGENTHUB_WALLET_KEY and call hub.call(...). The instructions do not ask for unrelated files or credentials, but they do instruct runtime installation and execution of third-party code that will handle a private key — this gives the SDK broad runtime discretion and cannot be verified from the SKILL.md alone.
Install Mechanism
Installation is via npm (rwagenthub-sdk@1.0.2) into the skill's workspace. npm installs are expected for Node-based skills and are traceable, but npm packages can execute postinstall scripts and include arbitrary code; the package source should be reviewed. No high-risk direct downloads/archives are used.
!
Credentials
The single required env var is AGENTHUB_WALLET_KEY (primary credential). Requiring a wallet private key is plausible for signing micropayments, but it's highly sensitive: misuse or malicious SDK behavior could allow theft of funds. The SKILL.md advises using a dedicated low-funds wallet, which mitigates risk but does not eliminate the need to trust the SDK and gateway.
Persistence & Privilege
always is false and the skill installs into its own workspace. The skill does not request persistent platform-wide privileges or to modify other skills' configs. Autonomous invocation is allowed by default (not a flag by itself).
Assessment
This skill is internally coherent for a pay-per-call gateway, but it requires you to trust a third-party npm package with a wallet private key. Before installing or using it: 1) Audit the rwagenthub-sdk source on npm/GitHub (verify what network calls and signing it performs, and check for postinstall scripts). 2) Use a dedicated wallet funded with minimal USDC only (the skill itself recommends $1); never use a primary wallet or one holding large balances. 3) Prefer running the SDK in a sandbox or isolated environment and monitor outbound network traffic. 4) Pin the SDK version and inspect package contents after install (node_modules/rwagenthub-sdk). 5) If you cannot review the SDK, consider asking the provider for a non-key-based alternative (e.g., an API key with limited scope or server-side payment handling). These steps reduce risk but do not eliminate it.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🤖 Clawdis
Binsnode, npm
EnvAGENTHUB_WALLET_KEY
Primary envAGENTHUB_WALLET_KEY

Install

Install AgentHub SDKnpm i -g rwagenthub-sdk
latestvk97bxkqf8mn24sp4qvqqg7x0an829jzw
521downloads
1stars
21versions
Updated 23h ago
v1.0.4
MIT-0

AgentHub — 32 AI APIs, pay per call in USDC

You have access to AgentHub, a paid API gateway for real-world data.

  • What it does: Routes API calls to 32 data providers (flights, weather, stocks, etc.)
  • How payment works: Each call costs $0.01–$0.06 USDC, charged automatically via the x402 micropayment protocol on Base Mainnet. The wallet credential signs a gasless USDC transfer locally — no gas fees, no custody of funds by the gateway.
  • SDK source: npmjs.com/package/rwagenthub-sdk — open source, auditable, no obfuscation. Only calls https://agents-production-73c1.up.railway.app/v1/call and the Base Mainnet RPC.
  • Gateway URL: https://agents-production-73c1.up.railway.app

Setup (one time)

1. Install the SDK

npm install --prefix ~/.openclaw/workspace/skills/rwagenthub rwagenthub-sdk@1.0.2

Installs the pinned SDK version into the skill's own folder. No global install required.

2. Configure your wallet credential

⚠️ Use a dedicated wallet funded only with the USDC you need for API calls. Do not use a primary wallet.

openclaw config set env.AGENTHUB_WALLET_KEY "YOUR_WALLET_CREDENTIAL"

The credential is used locally to sign a USDC micropayment authorization. Only the signed authorization (not the credential itself) is sent over the network. The gateway never receives or stores the credential.

3. Add USDC to your wallet on Base Mainnet

  • Minimum recommended: $1 USDC (covers 100+ calls at $0.01 each)
  • Acquire USDC via Coinbase or any exchange, withdraw to Base network

Before every call — verify SDK is installed

Run this check before making any API call. Installs automatically if missing:

SDK_DIR="$HOME/.openclaw/workspace/skills/rwagenthub"
[ -f "$SDK_DIR/node_modules/rwagenthub-sdk/index.js" ] || \
  npm install --prefix "$SDK_DIR" rwagenthub-sdk@1.0.2 --silent

If AGENTHUB_WALLET_KEY is not set, tell the user:

"Please run: openclaw config set env.AGENTHUB_WALLET_KEY \"YOUR_WALLET_CREDENTIAL\""


How to call an API

For every API call, write a temporary script and run it with Node.js:

cat > /tmp/agenthub-call.mjs << SCRIPT
import AgentHub from "$HOME/.openclaw/workspace/skills/rwagenthub/node_modules/rwagenthub-sdk/index.js";
const hub = new AgentHub({ privateKey: process.env.AGENTHUB_WALLET_KEY });
const result = await hub.call('API_NAME', { ...inputs... });
console.log(JSON.stringify(result, null, 2));
SCRIPT
node /tmp/agenthub-call.mjs

Replace API_NAME and { ...inputs... } with the API name and parameters from the list below.


Available APIs

✈️ Travel

flight_search — $0.01

await hub.call('flight_search', { from: 'EZE', to: 'JFK', date: '2026-04-15', adults: 1, cabin_class: 'economy' })

flight_search_pro — $0.01

await hub.call('flight_search_pro', { from: 'MAD', to: 'NYC', date: '2026-06-01', adults: 1, cabin_class: 'ECONOMY' })

flight_status — $0.01

await hub.call('flight_status', { carrier_code: 'AA', flight_number: '100', date: '2026-06-01' })

seat_map — $0.01

await hub.call('seat_map', { offer_id: 'off_...' })

airport_search — $0.01

await hub.call('airport_search', { country_code: 'AR', limit: 10 })

hotel_search — $0.06

await hub.call('hotel_search', { city_code: 'NYC', check_in: '2026-04-01', check_out: '2026-04-03', adults: 2, ratings: '4,5' })

activities_search — $0.01

await hub.call('activities_search', { latitude: 40.7128, longitude: -74.006, radius: 5 })

🌐 Web & Search

web_search — $0.02

await hub.call('web_search', { query: 'best hotels in Paris 2026', type: 'search', num: 10 })

web_search_ai — $0.02

await hub.call('web_search_ai', { query: 'latest AI agent news', count: 5, freshness: 'Week' })

web_search_full — $0.02

await hub.call('web_search_full', { query: 'x402 protocol guide', limit: 3 })

places_search — $0.02

await hub.call('places_search', { query: 'coffee shops', location: 'Tokyo, Japan', num: 5 })

image_search — $0.01

await hub.call('image_search', { query: 'Patagonia landscape', num: 5 })

shopping_search — $0.02

await hub.call('shopping_search', { query: 'carry-on luggage 40L', num: 5 })

url_extract — $0.02

await hub.call('url_extract', { url: 'https://en.wikipedia.org/wiki/Patagonia', format: 'markdown' })

url_scrape — $0.01

await hub.call('url_scrape', { url: 'https://example.com', only_main_content: true })

url_scrape_json — $0.02

await hub.call('url_scrape_json', { url: 'https://news.ycombinator.com', prompt: 'extract top 3 story titles and point counts' })

🌤️ Weather & Location

weather_forecast — $0.01

await hub.call('weather_forecast', { location: 'Buenos Aires', days: 7, units: 'metric' })

geocode — $0.01

await hub.call('geocode', { query: 'Eiffel Tower, Paris', mode: 'forward' })
// reverse: { lat: 48.8584, lon: 2.2945, mode: 'reverse' }

💰 Crypto & DeFi

crypto_price — $0.01

await hub.call('crypto_price', { coins: 'btc,eth,sol', vs_currency: 'usd' })

exchange_rate — $0.01

await hub.call('exchange_rate', { from: 'USD', to: 'EUR,GBP,JPY', amount: 100 })

defi_market_snapshot — $0.02

await hub.call('defi_market_snapshot', { top: 10 })

defi_yields — $0.02

await hub.call('defi_yields', { stablecoin_only: true, no_il_risk: true, min_apy: 5, top: 10 })

📈 Stocks & Markets

stock_quote — $0.01

await hub.call('stock_quote', { symbol: 'AAPL' })

stock_profile — $0.01

await hub.call('stock_profile', { symbol: 'NVDA' })

stock_search — $0.01

await hub.call('stock_search', { query: 'Apple', limit: 5 })

market_news — $0.01

await hub.call('market_news', { category: 'general', limit: 10 })
// category options: 'general', 'forex', 'crypto', 'merger'
// add symbol: 'AAPL' for company-specific news

earnings_calendar — $0.01

await hub.call('earnings_calendar', { from: '2026-04-01', to: '2026-04-30' })

⛓️ Blockchain & Security

alchemy_portfolio — $0.02

await hub.call('alchemy_portfolio', { address: '0x...', networks: ['eth-mainnet', 'base-mainnet'] })
// networks: eth-mainnet, base-mainnet, arb-mainnet, opt-mainnet, polygon-mainnet, bnb-mainnet, avax-mainnet

alchemy_tx_history — $0.02

await hub.call('alchemy_tx_history', { address: '0x...', networks: ['eth-mainnet'], page_size: 20, order: 'desc' })

opensky_flights — $0.01

await hub.call('opensky_flights', { mode: 'live', limit: 20 })
// mode: 'live' | 'arrivals' | 'departures' — add airport: 'KJFK' for airport modes

ip_reputation — $0.01

await hub.call('ip_reputation', { ip: '8.8.8.8', max_age_days: 90 })

🛠️ Utilities

code_exec — $0.05

await hub.call('code_exec', { code: 'print(sum(range(1, 101)))', language: 'python', timeout: 30 })
// language: 'python' | 'javascript' | 'r' | 'bash'

email_send — $0.01

await hub.call('email_send', { to: 'user@example.com', subject: 'Hello', text: 'Message body.' })

Full example

Ask: "What's the price of Bitcoin?"

cat > /tmp/agenthub-call.mjs << SCRIPT
import AgentHub from "$HOME/.openclaw/workspace/skills/rwagenthub/node_modules/rwagenthub-sdk/index.js";
const hub = new AgentHub({ privateKey: process.env.AGENTHUB_WALLET_KEY });
const result = await hub.call('crypto_price', { coins: 'btc', vs_currency: 'usd' });
console.log(JSON.stringify(result, null, 2));
SCRIPT
node /tmp/agenthub-call.mjs

Errors

ErrorCauseFix
payment failedInsufficient USDC on BaseTop up wallet balance
AgentHub: API error — unknown_apiWrong API nameCheck spelling against the list above
AgentHub: API error — invalid_inputsMissing or wrong parametersCheck the inputs for that API
Cannot find module / ERR_MODULE_NOT_FOUNDSDK not installedRun npm install --prefix ~/.openclaw/workspace/skills/rwagenthub rwagenthub-sdk@1.0.2

Comments

Loading comments...