Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

OpenDexter

v1.0.0

Use OpenDexter to search, price-check, and pay for any x402 API. Trigger whenever the user wants to find paid APIs, call an x402 endpoint, check pricing, see...

0· 73·0 current·0 all-time
byBranchM@branchmanager69

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for branchmanager69/opendexter.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "OpenDexter" (branchmanager69/opendexter) from ClawHub.
Skill page: https://clawhub.ai/branchmanager69/opendexter
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install opendexter

ClawHub CLI

Package manager switcher

npx clawhub@latest install opendexter
Security Scan
Capability signals
CryptoRequires walletCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's stated purpose is to search, price-check, and automatically pay x402 APIs using USDC across chains. Paying onchain requires wallet access (private keys, a signing provider, or an external wallet integration), but the package declares no environment variables, config paths, or credentials to enable signing or fund access. That is a core capability/requirement mismatch.
!
Instruction Scope
SKILL.md instructs the agent to inspect configured wallets, check balances across multiple chains, auto-select the cheapest chain, and perform payments. Those instructions implicitly require reading or using wallet credentials and performing transactions, but the skill gives no guidance where those wallets come from or how user consent/approval is handled.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. That lowers some risk, but it also means the runtime behavior depends entirely on the agent environment (where the missing wallet integration would live).
!
Credentials
No env vars, primary credential, or config paths are declared even though the functionality logically requires access to wallet credentials or a signing service. The absence of any declared credential is disproportionate to the claimed ability to sign and submit payments across multiple chains.
Persistence & Privilege
The skill does not request always-on presence and does not declare modifications to other skills or system-wide configs. Autonomous invocation is allowed by platform default but the skill does not request elevated persistence.
What to consider before installing
Before installing, ask the publisher how wallet access and signing are handled: where are private keys stored, does the skill require the agent to have direct access to your wallet, and will each transaction require explicit user approval? Prefer skills that document the signing flow (e.g., use of an external wallet provider or prompt-based signing), publish source code or a homepage, and support per-call spending limits or mandatory confirmations. Because this skill has no source/homepage and declares no credential requirements while promising automatic payments, treat it as unproven and avoid granting it wallet or signing access until you can verify its implementation and safety.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fcabhgv1xr795hs52s9skxx84gh0e
73downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

OpenDexter — x402 API Marketplace

OpenDexter gives you access to the x402 API marketplace across Solana and EVM chains (Base, Polygon, Arbitrum, Optimism, Avalanche). Search, preview pricing, and call any endpoint with automatic USDC payment. No API keys or subscriptions needed for the endpoints — you just pay per call.

Tools

x402_search — Find APIs

Search the OpenDexter marketplace. Results are ranked by a composite score (quality, usage, freshness, reputation, reliability).

Each result includes: name, price (USDC), network, qualityScore (0-100), verified status, seller, and call count.

Highlight verified endpoints (qualityScore 75+). Search is fuzzy — typos still find results.

x402_check — Preview Pricing

Probe an endpoint for payment requirements without paying. Returns per-chain pricing options. Always use before x402_fetch so the user knows the cost upfront.

x402_fetch — Call and Pay

Call any x402 endpoint with automatic payment from the configured wallet. The plugin checks USDC balances across all funded chains and picks the best option. Returns the API response data plus a payment receipt.

If the wallet has no funds on any accepted chain, tell the user to fund their wallet.

x402_pay — Alias for x402_fetch

Same tool, alternate name.

x402_wallet — Wallet Status

Shows which wallets are configured (Solana, EVM), the per-call spending limit, and the active network. Use when the user asks about their wallet or setup.

Workflows

"Find me an API for X"

  1. x402_search with their query
  2. Present top results with prices and quality scores
  3. x402_check on their pick
  4. Show per-chain pricing
  5. x402_fetch to call it

"Call this URL"

  1. x402_check to show the price
  2. x402_fetch to call and pay

"What's my wallet setup?"

  1. x402_wallet

Quality Scores

  • 90-100: Excellent. Verified, reliable, well-documented.
  • 75-89: Good. Passed verification.
  • 50-74: Mediocre. May have issues.
  • Below 50: Untested or poor.

Tips

  • Most endpoints cost $0.01-$0.10 per call.
  • Use verified: true to filter to tested endpoints.
  • The plugin auto-selects the cheapest chain that the endpoint accepts and the wallet has funds on.
  • If no wallet is configured, tools return a config help message.

Comments

Loading comments...