Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Bittensor Chutes x402

v1.0.0

Build a pay-per-inference proxy for Bittensor Chutes AI. Accept USDC payments for decentralized AI inference using x402.

0· 99·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for primer-dev/chutes-x402.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Bittensor Chutes x402" (primer-dev/chutes-x402) from ClawHub.
Skill page: https://clawhub.ai/primer-dev/chutes-x402
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install chutes-x402

ClawHub CLI

Package manager switcher

npx clawhub@latest install chutes-x402
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (pay-per-inference proxy for Chutes/x402) aligns with the SKILL.md: it scaffolds a proxy, explains pricing, and shows deployment options. Requiring either Node or Python tooling is reasonable because the README provides both TypeScript and Python flows.
!
Instruction Scope
Runtime instructions tell the agent to scaffold code via npx/pip, copy/edit a .env, deploy with wrangler/docker/fly/etc., and to verify payments via a 'Primer Facilitator'. The SKILL.md implies your proxy will send payment verification and inference requests to external services (Primer facilitator, Chutes API). That means user requests and payment metadata will transit to third parties by default; the instructions do not detail what is sent or how to protect sensitive data.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That minimizes on-disk risk from the skill itself, but the scaffold step directs running npx/pip to fetch external packages (primer/x402). The skill does not itself download arbitrary archives.
!
Credentials
The SKILL.md requires CHUTES_API_KEY and WALLET_ADDRESS (marked as required) and mentions FACILITATOR_URL, but the registry metadata did not declare any required environment variables. The skill therefore fails to declare the secrets it needs. Also, defaulting FACILITATOR_URL to Primer's facilitator means payment verification data may flow to a third party unless the user overrides it.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable only. It does not request persistent platform privileges.
What to consider before installing
Key things to consider before installing: 1) The SKILL.md requires CHUTES_API_KEY and WALLET_ADDRESS (and optionally FACILITATOR_URL) but the skill metadata did not declare required env vars — expect to provide secrets when you scaffold. 2) By default the template uses Primer's facilitator for payment verification — that means request and payment metadata may be sent to a third party; review Primer's privacy/security practices or set FACILITATOR_URL to a service you control. 3) The scaffold uses npx/pip to fetch packages (primer/x402); inspect the generated repository and the packages' GitHub/npm/pypi sources before running or deploying any code. 4) Do not place private wallet keys or other private keys in public or unsecured .env files; understand how payments are signed/verified and whether you need private keys. 5) Because this is instruction-only (no code to scan), a static scanner found nothing — but that also means there was nothing to audit; inspect generated code and network calls before production use. If you need higher assurance, request the upstream repository URL or the exact package manifests to review before running the scaffold commands.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🧠 Clawdis
Any binnode, npx, python3, pip
latestvk973tcrw36h142v4chzfnjg4f183gpmw
99downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Chutes AI Proxy (x402)

Build a pay-per-inference proxy for Bittensor Chutes (Subnet 64). Accept USDC payments on Base and forward requests to Chutes' decentralized AI network.

When to Use This Skill

Use this skill when the user wants to:

  • Build an AI inference API that accepts crypto payments
  • Wrap Chutes/Bittensor with their own pricing
  • Create a pay-per-request AI service without subscriptions
  • Monetize AI access using stablecoins
  • Set up a Bittensor-powered AI endpoint

How to Respond

User Says/AsksWhat to Do
"Create a Chutes proxy"Run x402 create chutes-proxy my-proxy
"I want to sell AI inference"Scaffold the proxy, explain the business model
"How do I accept payments for AI?"Explain x402 + Chutes, offer to scaffold
"Set up Bittensor integration"Run the create command
"What models does Chutes support?"List models (DeepSeek, Llama, Qwen, etc.)

Quick Start

Node.js / TypeScript

npx @primersystems/x402 create chutes-proxy my-ai-proxy
cd my-ai-proxy
npm install
cp .env.example .env
# Edit .env with your Chutes API key and wallet address
npm run dev

Python

pip install primer-x402
x402 create chutes-proxy my-ai-proxy
cd my-ai-proxy
pip install -r requirements.txt
cp .env.example .env
# Edit .env with your Chutes API key and wallet address
uvicorn main:app --reload

How It Works

User Request
     |
     v
[Your Proxy] -- No payment? --> Return 402 + price
     |
     v
User signs USDC payment (gasless)
     |
     v
[Your Proxy] -- Verify payment --> [Primer Facilitator]
     |
     v
[Chutes API] -- Forward request --> Bittensor Subnet 64
     |
     v
AI Response returned to user

You pre-pay Chutes with your API credits. Users pay YOU in USDC. You keep the margin.

Configuration

After scaffolding, edit .env:

VariableDescriptionRequired
CHUTES_API_KEYYour Chutes API key from chutes.aiYes
WALLET_ADDRESSYour wallet to receive USDCYes
PRICE_PER_1K_TOKENSYour price in USD (default: 0.001)No
FACILITATOR_URLx402 facilitator (default: Primer's)No

Getting a Chutes API Key

  1. Go to chutes.ai
  2. Sign up / connect wallet
  3. Subscribe to a tier ($3/month base)
  4. Generate API key (starts with cpk_)

Deployment

Cloudflare Workers (TypeScript - Free)

wrangler login
wrangler secret put CHUTES_API_KEY
wrangler secret put WALLET_ADDRESS
npm run deploy

Docker (Python)

docker build -t chutes-proxy .
docker run -p 8000:8000 --env-file .env chutes-proxy

Other Platforms

  • fly.io: fly launch && fly secrets set CHUTES_API_KEY=xxx
  • Railway/Render: Connect repo, set env vars in dashboard
  • Vercel Edge: Build and deploy TypeScript version

API Endpoints

Your proxy exposes:

EndpointDescriptionPayment
GET /Health checkFree
POST /v1/chat/completionsChat completions (OpenAI-compatible)Required
GET /v1/modelsList available modelsFree

Supported Models

Any model on Chutes, including:

  • deepseek-ai/DeepSeek-V3
  • Qwen/Qwen3-235B-A22B
  • meta-llama/Llama-3.1-70B-Instruct
  • meta-llama/Llama-3.1-8B-Instruct

See chutes.ai for the full list.

Pricing Strategy

The proxy estimates tokens and charges upfront:

Price = (estimated_tokens / 1000) * PRICE_PER_1K_TOKENS

Set PRICE_PER_1K_TOKENS higher than Chutes' cost to make margin. Example:

  • Chutes costs you ~$0.0005/1K tokens
  • You charge $0.001/1K tokens
  • You keep 50% margin

Limitations

  • Streaming not supported - Template doesn't handle stream: true
  • Token estimation is approximate - Uses ~4 chars/token heuristic
  • Pre-payment only - No post-inference reconciliation

Use Cases

WhoWhy
AI agent operatorsGive agents paid AI access without API keys
API resellersWrap Chutes with your branding/pricing
Privacy servicesAI without accounts or KYC
Bittensor minersAdd stablecoin revenue stream

Testing Your Proxy

# Should return 402 Payment Required
curl http://localhost:8787/v1/chat/completions \
  -H "Content-Type: application/json" \
  -d '{"messages":[{"role":"user","content":"Hello"}]}'

# Pay and get response (using x402 CLI)
npx @primersystems/x402 pay http://localhost:8787/v1/chat/completions \
  --max-amount 0.01 \
  --method POST \
  --body '{"messages":[{"role":"user","content":"Hello"}]}'

Links

Comments

Loading comments...