Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ntriq X402 Document Intel Batch

v1.0.0

Batch document OCR, classification, and extraction for up to 500 images. Flat $15.00 USDC via x402.

0· 39·1 current·1 all-time
byntriq@ntriq-gh
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The declared purpose is batch OCR/extraction, which matches the POST API described. However the SKILL.md simultaneously claims '100% local inference on Mac Mini' while instructing the agent to POST data to https://x402.ntriq.co.kr — that is a direct contradiction. The skill also mentions a $15 USDC payment, but no credential or payment mechanism is declared in metadata.
!
Instruction Scope
Runtime instructions direct the agent to upload image URLs (and implicitly document contents) to a third‑party service and include an X-PAYMENT header. There are no instructions to redact or limit sensitive content. The instructions do not reference local file access or environment variables, but they do require sending potentially sensitive documents off‑device without explaining retention, encryption, or privacy guarantees.
Install Mechanism
This is an instruction‑only skill with no install spec and no code to write to disk, which minimizes install risk.
!
Credentials
The SKILL.md requires an X-PAYMENT header for payment, but the skill declares no required environment variables/credentials or primary credential. That mismatch is disproportionate and unclear: the agent (or user) must supply payment/auth info, but the skill gives no guidance on where that secret comes from or how it will be used or stored.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system permissions or modify other configurations. Autonomous invocation is allowed by default but not combined here with other privileged requests.
What to consider before installing
This skill will send your document URLs and a payment header to a third‑party server. Before installing, ask the publisher to: (1) explain the payment flow and provide a documented, secure method for supplying the X-PAYMENT token (and declare it as a required credential), (2) confirm whether processing actually occurs locally or remotely and clarify retention/ deletion/ encryption policies for uploaded documents, and (3) provide an API spec or official SDK/hosted docs. Do not send sensitive documents until you verify privacy guarantees and how payments/tokens are handled. Prefer testing with non-sensitive samples and request refund/abort policies if the service is misrepresented.

Like a lobster shell, security has layers — review code before you run it.

latestvk97addjg3tx84xt8pj65209ap984ve3r
39downloads
0stars
1versions
Updated 4d ago
v1.0.0
MIT-0

Document Intelligence Batch (x402)

Process up to 500 document images in one call — OCR, classification, table extraction, and summarization. Flat $15.00 USDC. 100% local inference on Mac Mini.

How to Call

POST https://x402.ntriq.co.kr/document-intel-batch
Content-Type: application/json
X-PAYMENT: <x402-payment-header>

{
  "images": [
    "https://example.com/contract1.jpg",
    "https://example.com/report2.jpg"
  ],
  "analysis_type": "extract"
}

Parameters

ParameterTypeRequiredDescription
imagesarrayDocument image URLs (max 500)
analysis_typestringextract | summarize | classify | table (default: extract)
languagestringOutput language (default: en)

Example Response

{
  "status": "ok",
  "count": 2,
  "results": [
    {
      "image_url": "https://example.com/contract1.jpg",
      "status": "ok",
      "analysis_type": "extract",
      "analysis": "SERVICE AGREEMENT\nDate: January 15, 2026\nParties: ..."
    }
  ]
}

Payment

  • Price: $15.00 USDC flat (up to 500 documents)
  • Network: Base mainnet (EIP-3009 gasless)
  • Protocol: x402
curl https://x402.ntriq.co.kr/services

Comments

Loading comments...