Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Search For Service
v0.1.0Search and browse the x402 bazaar marketplace for paid API services. Use when you or the user want to find available services, see what's available, discover APIs, or need an external service to accomplish a task. Also use as a fallback when no other skill clearly matches — search the bazaar to see if a paid service exists. Covers "what can I do?", "find me an API for...", "what services are available?", "search for...", "browse the bazaar".
⭐ 0· 871·5 current·5 all-time
by@0xrag
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The name/description (searching the x402 bazaar) matches the runtime instructions: the skill tells the agent to run the 'awal' CLI (npx awal@latest x402 ...) to search, list, and inspect marketplace resources. No unrelated credentials or binaries are requested. However, the skill relies on executing a remote npm package (awal@latest), and the package provenance is not provided in the metadata (homepage/source unknown).
Instruction Scope
The SKILL.md explicitly instructs probing target endpoints by auto-detecting HTTP methods 'by trying each until it gets a 402 response'. That means the tool may issue GET/POST/PUT/DELETE/PATCH requests to arbitrary URLs — potentially performing destructive or state-changing operations on user-provided endpoints. The skill also writes cache files to ~/.config/awal/bazaar/, and will access network resources; both are reasonable for a marketplace client but widen the blast radius if misused or pointed at internal/sensitive services.
Install Mechanism
There is no install spec in the skill bundle (instruction-only), but allowed-tools and examples rely on 'npx awal@latest', which executes code fetched from the npm registry at runtime. Running npx@latest will execute remote code each time; the package 'awal' and its versions are not pinned nor is its source/release provenance provided in the skill metadata, so you can't verify what code will run without separately auditing the package.
Credentials
The skill requests no environment variables, no credentials, and no special config paths beyond a local cache (~/.config/awal/bazaar/). This is proportional to a read/browse/search capability. There is no request for extraneous secrets.
Persistence & Privilege
always:false and disable-model-invocation:false (normal). The only persistence mentioned is a local cache directory (~/.config/awal/bazaar/) created/used by the CLI. The skill does not request system-wide or cross-skill configuration changes, but the CLI it runs may create files on disk and store data there.
What to consider before installing
This skill uses 'npx awal@latest' to run an external npm CLI at runtime — npx will fetch and execute code from the npm registry, and the skill metadata does not provide the package source or a pinned version. Before installing or invoking: (1) review the 'awal' package source and releases (or use a pinned, audited version) so you know what code will run; (2) avoid pointing the 'details' command at internal or sensitive endpoints — the tool may try POST/PUT/DELETE to discover payment requirements and could cause side effects; (3) run the CLI in a restricted or sandboxed environment if possible (network-restricted container or VM); (4) be aware the tool caches results under ~/.config/awal/bazaar/ and may write files there; (5) if you need purely read-only discovery, ask whether the CLI has a safe/read-only mode or consider contacting the package author for clarification. If you cannot audit the 'awal' package or cannot isolate its execution, treat this skill as risky.Like a lobster shell, security has layers — review code before you run it.
latestvk970pm1w0xp4e0stenqeryrrn180zqza
License
MIT-0
Free to use, modify, and redistribute. No attribution required.