Ntriq X402 Screenshot Data Batch

Batch extract text, UI elements, and data from up to 500 screenshots. Flat $6.00 USDC via x402.

Security Scan

The skill's runtime instructions require sending screenshots and a payment header to a remote endpoint, but the SKILL.md also claims '100% local inference' and does not explain how to provide the required payment credential — these inconsistencies and the obvious data-exfiltration path are concerning.

Purpose & Capability

The skill is described as extracting data from screenshots and advertising '100% local inference on Mac Mini', but the runtime instructions require POSTing image URLs to https://x402.ntriq.co.kr. That is internally inconsistent: local inference implies processing on the user's device, while the documented API is remote. The payment requirement (X-PAYMENT header) is also essential to use the service but no credential mechanism is declared.

Instruction Scope

SKILL.md instructs the agent to send up to 500 screenshot URLs to a third-party endpoint and include an X-PAYMENT header. It does not explain how to construct/provide that header, how to handle local image files (it only shows URLs), or what data the service stores or logs. Submitting screenshots (which often contain sensitive data) to an external API is a clear data-exfiltration path and should be explicit and justified.

Install Mechanism

Instruction-only skill with no install spec or code files; nothing is written to disk by the skill itself. This is the lowest-risk install model, assuming the runtime instructions are honest.

Credentials

No environment variables or credentials are declared, yet the API requires an X-PAYMENT header to pay $6.00 USDC. The SKILL.md references Base mainnet / EIP-3009 gasless payments but gives no guidance on how the agent or user should supply cryptographic signatures or payment tokens. The lack of declared credential requirements is disproportionate to the documented payment requirement and leaves ambiguity about where secrets must come from.

Persistence & Privilege

The skill is not always-enabled and does not request persistent system privileges. It does not attempt to modify other skills or system-wide settings in the provided instructions.

What to consider before installing

Do not send sensitive screenshots to this skill until the developer clarifies payment and privacy. Specifically: (1) Ask the vendor to explain the '100% local inference' claim versus the remote API — which is true? (2) Ask how to generate/provide the X-PAYMENT header (is this a signed wallet token? where is it stored?), and request that required credentials be declared in the skill manifest. (3) Confirm the service's data retention, logging, and deletion policy for uploaded screenshots. (4) Verify the endpoint domain and TLS certificate (x402.ntriq.co.kr and x402.org differ). (5) If you must test, only use non-sensitive images and consider a local/offline alternative. If the vendor cannot answer these questions and provide a clear, auditable payment flow, treat the skill as unsafe to use with private data.

Screenshot Data Batch (x402)

Extract text, UI elements, layout structure, and data tables from up to 500 screenshots in one call. Flat $6.00 USDC. 100% local inference on Mac Mini.

How to Call

POST https://x402.ntriq.co.kr/screenshot-data-batch
Content-Type: application/json
X-PAYMENT: <x402-payment-header>

{
  "images": [
    "https://example.com/screen1.png",
    "https://example.com/screen2.png"
  ],
  "extract_type": "full"
}

Parameters

Parameter	Type	Required	Description
images	array	✅	Screenshot URLs (max 500)
extract_type	string	❌	full | text | data (default: full)
language	string	❌	Output language (default: en)

Example Response

{
  "status": "ok",
  "count": 2,
  "results": [
    {
      "image_url": "https://example.com/screen1.png",
      "status": "ok",
      "extract_type": "full",
      "analysis": "Dashboard showing sales metrics: Total Revenue $124,500, Active Users 3,421..."
    }
  ]
}

Payment

• Price: $6.00 USDC flat (up to 500 screenshots)
• Network: Base mainnet (EIP-3009 gasless)
• Protocol: x402

curl https://x402.ntriq.co.kr/services