Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ntriq X402 Content Generate

v1.0.0

AI content generation for blogs, emails, social posts, product descriptions. $0.02 USDC via x402.

0· 77·1 current·1 all-time
byntriq@ntriq-gh

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ntriq-gh/ntriq-x402-content-generate.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ntriq X402 Content Generate" (ntriq-gh/ntriq-x402-content-generate) from ClawHub.
Skill page: https://clawhub.ai/ntriq-gh/ntriq-x402-content-generate
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ntriq-x402-content-generate

ClawHub CLI

Package manager switcher

npx clawhub@latest install ntriq-x402-content-generate
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The description promises "100% local inference on Mac Mini" but the SKILL.md's only runtime path is an HTTPS POST to https://x402.ntriq.co.kr/content-generate (a remote service). That is a direct contradiction: either the service is remote (and not local) or the documentation is inaccurate/misleading.
Instruction Scope
Instructions are narrowly scoped to sending a JSON payload to the x402 endpoint and expect an X-PAYMENT header. They do not instruct reading local files or other env vars, which is good, but the required payment header is not explained (how to obtain it, what it contains). Because requests will send user prompts and possibly sensitive content to a third party, that data flow should be explicit.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing gets written to disk or installed automatically — lowest install risk.
!
Credentials
The SKILL.md expects an X-PAYMENT header for $0.02 USDC per call, but the skill declares no required environment variables or credentials. There is no explanation of how payment/auth is provided, stored, or generated. Absence of declared credentials while requiring a header for payments is an incoherence and a potential vector for secret mishandling.
Persistence & Privilege
The skill does not request always:true and has no install-time persistence. It does not request system configuration changes or access to other skills' settings.
What to consider before installing
This skill appears to call a remote API at x402.ntriq.co.kr and charge $0.02 USDC per call, but its documentation also claims "local inference," which is inconsistent. Before installing or using it, ask the provider to clarify: (1) whether inference is local or performed on their remote server; (2) exactly how the X-PAYMENT header is obtained and whether any secret (private key, wallet auth token) must be supplied or stored; (3) what data is logged/stored by the remote service and the privacy policy; and (4) the operator identity and reputation of x402.ntriq.co.kr. Do not expose private prompts, secrets, or sensitive PII until you confirm payment/auth handling and data retention. If you plan to test, do so with non-sensitive content and monitor network requests.

Like a lobster shell, security has layers — review code before you run it.

latestvk972mw818wcytae358qtpvqcy584zazd
77downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Content Generate (x402)

Generate professional content — blog posts, emails, social media, product descriptions, reports, and ad copy. 100% local inference on Mac Mini. $0.02 USDC per call.

How to Call

POST https://x402.ntriq.co.kr/content-generate
Content-Type: application/json
X-PAYMENT: <x402-payment-header>

{
  "prompt": "benefits of standing desks for office workers",
  "style": "blog",
  "tone": "professional",
  "max_words": 500
}

Parameters

ParameterTypeRequiredDescription
promptstringTopic or content brief
stylestringblog | email | social | product | report | ad (default: blog)
tonestringprofessional | casual | persuasive | friendly (default: professional)
languagestringOutput language (default: en)
max_wordsintegerMax word count (default: 500)

Example Response

{
  "status": "ok",
  "style": "blog",
  "title": "5 Reasons Standing Desks Transform Office Productivity",
  "content": "Standing desks have revolutionized...",
  "word_count": 487
}

Payment

  • Price: $0.02 USDC per call
  • Network: Base mainnet (EIP-3009 gasless)
  • Protocol: x402
curl https://x402.ntriq.co.kr/services

Comments

Loading comments...