Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ntriq X402 Blueprint

v1.0.0

AI architectural blueprint analysis — extract rooms, dimensions, materials from floor plans. $0.05 USDC via x402.

0· 67·1 current·1 all-time
byntriq@ntriq-gh

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ntriq-gh/ntriq-x402-blueprint.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ntriq X402 Blueprint" (ntriq-gh/ntriq-x402-blueprint) from ClawHub.
Skill page: https://clawhub.ai/ntriq-gh/ntriq-x402-blueprint
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ntriq-x402-blueprint

ClawHub CLI

Package manager switcher

npx clawhub@latest install ntriq-x402-blueprint
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description and SKILL.md describe extracting rooms, dimensions, materials from blueprints — the provided POST API is consistent with that capability. However the doc claims 'Uses local vision AI' while the runtime instructions send images to a remote endpoint (x402.ntriq.co.kr), which is a clear contradiction. The skill also references an X-PAYMENT header for $0.05 USDC per call but declares no credential or payment mechanism in the metadata.
!
Instruction Scope
Runtime instructions direct the agent to POST blueprint images (URL or base64) to an external service and include an X-PAYMENT header. That means any image you submit (often sensitive) will be transmitted off-device. The SKILL.md does not explain how to obtain or validate the X-PAYMENT header, nor does it provide privacy/retention guarantees. No other file-system or environment access is requested, but the external-network data exfiltration of potentially sensitive blueprints is the main risk.
Install Mechanism
Instruction-only skill with no install spec or code files — nothing is written to disk and no third-party packages are installed. This is lower technical risk, but does not mitigate the network/data risks noted above.
Credentials
The skill declares no required environment variables or credentials, which limits direct access to secrets. However, it uses an X-PAYMENT header (undocumented in metadata) for paid calls; the absence of a declared payment credential is an inconsistency. Also, because the skill posts images externally, you may be required to provide payment/authentication interactively or via headers — be cautious about where/how you supply any wallet keys or tokens.
Persistence & Privilege
always is false and there is no install behavior or persistent modification of agent settings. The skill does not request elevated persistence or modify other skills.
What to consider before installing
This skill will send the blueprint images you provide to https://x402.ntriq.co.kr and charges $0.05 USDC per call via an X-PAYMENT header. Before installing or using it: (1) Confirm you trust the x402 service and review its privacy/retention policy — floorplans can be sensitive. (2) Clarify how the X-PAYMENT header is issued and whether you must expose wallet credentials; never paste private keys into a skill. (3) Note the SKILL.md says 'local vision AI' but the API is remote — ask the author which is correct. (4) If you need confidentiality, prefer a verified local processing tool or a vetted vendor; test with non-sensitive samples first. (5) If you proceed, limit what images you upload and monitor any charges on your wallet/address.

Like a lobster shell, security has layers — review code before you run it.

latestvk97es0qkz5fcrb87r4en2tc2ch84zfb5
67downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Blueprint Intelligence (x402)

Extract structured data from architectural blueprints and floor plans — room names, dimensions, areas, materials, and structural elements. Uses local vision AI. $0.05 USDC per call.

How to Call

POST https://x402.ntriq.co.kr/blueprint
Content-Type: application/json
X-PAYMENT: <x402-payment-header>

{
  "image_url": "https://example.com/floorplan.jpg",
  "analysis_type": "full"
}

Parameters

ParameterTypeRequiredDescription
image_urlstring✅ (or base64)Blueprint image URL
image_base64string✅ (or url)Base64-encoded image
analysis_typestringfull | dimensions | rooms | materials (default: full)
languagestringOutput language (default: en)

Example Response

{
  "status": "ok",
  "analysis_type": "full",
  "rooms": [
    {"name": "Living Room", "area": "24 m²", "dimensions": "6m × 4m"},
    {"name": "Kitchen", "area": "12 m²", "dimensions": "4m × 3m"}
  ],
  "total_area": "85 m²",
  "scale": "1:100",
  "structural_elements": ["load-bearing wall", "steel beam"],
  "notes": "3-bedroom apartment, ground floor"
}

Payment

  • Price: $0.05 USDC per call
  • Network: Base mainnet (EIP-3009 gasless)
  • Protocol: x402
curl https://x402.ntriq.co.kr/services

Comments

Loading comments...