Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ntriq World Bank Development Goals

v1.0.0

Free API for UN Sustainable Development Goals (SDG) tracking. No subscription. Track progress by country for poverty, health, education, development metrics....

0· 65·0 current·0 all-time
byntriq@ntriq-gh

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ntriq-gh/ntriq-world-bank-development-goals.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ntriq World Bank Development Goals" (ntriq-gh/ntriq-world-bank-development-goals) from ClawHub.
Skill page: https://clawhub.ai/ntriq-gh/ntriq-world-bank-development-goals
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ntriq-world-bank-development-goals

ClawHub CLI

Package manager switcher

npx clawhub@latest install ntriq-world-bank-development-goals
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims 'No subscription' and 'direct World Bank database access' yet documents a third-party endpoint (https://x402.ntriq.co.kr/world-bank-goals) that charges $0.01 USDC per call. That mismatch between 'free/direct' and 'pay-per-call via a separate host' is inconsistent and could mislead users about cost and provenance.
Instruction Scope
SKILL.md is an instruction-only manifest that only advertises the endpoint, parameters, and example output. It does not ask the agent to read local files or other env vars (good), but is vague about how payment/authorization is handled and contains no guidance about credentials or wallet interactions required to pay on-chain.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing will be written to disk or installed. This is the lowest-risk install mechanism.
Credentials
The skill declares no required env vars or credentials (appropriate). However, the documented micropayment model (USDC on Base, EIP-3009) implies that some wallet or payment flow exists outside the skill; the skill does not request wallet keys (which is good), but users should confirm how billing is performed before providing any signing keys.
Persistence & Privilege
Skill is not always-enabled and does not request special system persistence or modify other skill/system configs. It can be invoked autonomously (platform default), which combined with external network calls means it could trigger paid requests if the agent is allowed to act without confirmation.
What to consider before installing
This skill is an instruction-only wrapper around a third-party endpoint rather than the official World Bank API; it claims to be 'free' but its own docs show a $0.01 USDC per-call charge. Before installing: (1) verify the service provider (x402.ntriq.co.kr) — check TLS certificate, reputation, and terms of service; (2) confirm the exact billing flow and that you will not need to supply private keys or wallet secrets to the agent; (3) consider using the official World Bank API (free) if you want guaranteed free access; (4) test with non-sensitive/simple queries and minimal funds; and (5) do not store or share private keys or secrets with the skill. If you need higher assurance, ask the publisher for an explanation of the 'free' claim and a privacy/billing policy.

Like a lobster shell, security has layers — review code before you run it.

latestvk973vyq5yjnchmzy0zqp96k2ys84w9ch
65downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

World Bank Development Goals

Free API for UN Sustainable Development Goals (SDG) progress tracking. Monitor 17 SDGs and 232 indicators by country, region, or globally using World Bank data. No subscription required — direct World Bank database access.

Parameters

ParameterTypeRequiredDescription
country_codestringISO 3166-1 alpha-2 or world for global
sdg_goalsarraySDG numbers 1–17 (default: all)
indicatorsarraySpecific indicator codes (e.g., SI.POV.NAHC)
year_rangeobject{"start": 2010, "end": 2023}

Example Response

{
  "country": "Kenya",
  "sdg_progress": {
    "SDG1_No_Poverty": {
      "headline_indicator": "Poverty headcount ratio at $2.15/day (2017 PPP)",
      "value": 26.8,
      "unit": "% of population",
      "year": 2021,
      "trend": "improving",
      "change_10yr": -14.2
    },
    "SDG3_Good_Health": {
      "under5_mortality_per1000": 41.2,
      "maternal_mortality_per100k": 342,
      "trend": "improving"
    }
  }
}

Use Cases

  • Impact investment SDG alignment reporting
  • Development organization program monitoring
  • ESG fund emerging market sustainability scoring

Access

# x402 endpoint — pay $0.01 USDC per call (Base mainnet)
POST https://x402.ntriq.co.kr/world-bank-goals

# Service catalog
curl https://x402.ntriq.co.kr/services

x402 micropayments — USDC on Base, gasless EIP-3009

Comments

Loading comments...