Ntriq X402 Compliance Check

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent and disclosed, but users should know it sends text to an external paid API and uses a crypto payment header per call.

This skill appears benign and purpose-aligned. Before using it, make sure you are comfortable paying $0.03 USDC per request and sending the selected contract, policy, or text to the provider at x402.ntriq.co.kr.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Using the skill can incur a small USDC charge each time it is called.

Why it was flagged

The skill discloses that each API call requires an x402 payment header and spends USDC. This is purpose-aligned and low-cost, but it still uses payment authority.

Skill content

X-PAYMENT: <x402-payment-header> ... Price: $0.03 USDC per call ... Network: Base mainnet

Recommendation

Confirm you are comfortable with paid calls and consider requiring approval or a spending limit before repeated use.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Any submitted text may leave your environment and be processed by the third-party service.

Why it was flagged

The documented workflow sends the user-provided text to an external provider endpoint for analysis. This is expected for the service, but contracts and policies may contain confidential content.

Skill content

POST https://x402.ntriq.co.kr/compliance-check ... { "text": "We store user passwords in plain text and share data with third parties.", "framework": "GDPR" }

Recommendation

Avoid submitting confidential, regulated, or client-sensitive text unless you trust the provider and have appropriate approval.