ClawHub

KYC.RIP Swap API

v1.0.0

Exchange cryptocurrencies via kyc.rip aggregator API. Use when swapping, converting, or exchanging crypto assets. Supports 700+ coins, no KYC, best rates acr...

⭐ 0· 104·0 current·0 all-time
by@xbtoshi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (KYC.RIP Swap API) matches the SKILL.md: it documents public HTTP endpoints for estimating rates, creating swaps, and checking status. There are no unrelated environment variables, binaries, or install steps requested that would be disproportionate to a simple API integration.
✓
Instruction Scope
Runtime instructions are API documentation and example HTTP requests only. The SKILL.md does not instruct the agent to read local files, environment variables, or system configuration, nor to exfiltrate data to arbitrary endpoints. It does, however, involve instructing users/agents to send real crypto to deposit addresses—which is expected for this purpose but carries financial risk.
✓
Install Mechanism
No install spec or code files are present (instruction-only). That minimizes filesystem or code-execution risk and is proportionate for an API documentation skill.
✓
Credentials
The skill declares no required environment variables or credentials and the instructions do not reference any hidden secrets. That aligns with the SKILL.md claim that endpoints are public and require no authentication.
✓
Persistence & Privilege
Flags show normal defaults (always: false, model invocation enabled). The skill does not request permanent presence or elevated privileges and does not attempt to modify other skills or system-wide settings.
Assessment
This skill appears internally consistent with its stated purpose (public swap aggregator docs). However: 1) the skill's source/homepage is unknown—verify the service's reputation before sending funds; 2) the API deals with real cryptocurrency deposits—always test with a very small amount first and confirm deposit addresses and memos exactly; 3) ensure usage is legal in your jurisdiction and consider using established, audited services for large transfers; 4) confirm TLS (https://api.kyc.rip) and monitor returned provider names/addresses for signs of phishing or address replacement.

Like a lobster shell, security has layers — review code before you run it.

aggregatorvk973rc77dkt3bghpzjqesntpqx833jx4anonymousvk973rc77dkt3bghpzjqesntpqx833jx4apivk973rc77dkt3bghpzjqesntpqx833jx4atomic-swapvk973rc77dkt3bghpzjqesntpqx833jx4bitcoinvk973rc77dkt3bghpzjqesntpqx833jx4bridgevk973rc77dkt3bghpzjqesntpqx833jx4btcvk973rc77dkt3bghpzjqesntpqx833jx4cross-chainvk973rc77dkt3bghpzjqesntpqx833jx4cryptocurrencyvk973rc77dkt3bghpzjqesntpqx833jx4defivk973rc77dkt3bghpzjqesntpqx833jx4ethvk973rc77dkt3bghpzjqesntpqx833jx4ethereumvk973rc77dkt3bghpzjqesntpqx833jx4exchangevk973rc77dkt3bghpzjqesntpqx833jx4ghost-protocolvk973rc77dkt3bghpzjqesntpqx833jx4latestvk973rc77dkt3bghpzjqesntpqx833jx4monerovk973rc77dkt3bghpzjqesntpqx833jx4mwcvk973rc77dkt3bghpzjqesntpqx833jx4no-kycvk973rc77dkt3bghpzjqesntpqx833jx4non-custodialvk973rc77dkt3bghpzjqesntpqx833jx4paymentsvk973rc77dkt3bghpzjqesntpqx833jx4privacyvk973rc77dkt3bghpzjqesntpqx833jx4rate-comparisonvk973rc77dkt3bghpzjqesntpqx833jx4stablecoinvk973rc77dkt3bghpzjqesntpqx833jx4swapvk973rc77dkt3bghpzjqesntpqx833jx4usdtvk973rc77dkt3bghpzjqesntpqx833jx4walletvk973rc77dkt3bghpzjqesntpqx833jx4xmrvk973rc77dkt3bghpzjqesntpqx833jx4zanovk973rc77dkt3bghpzjqesntpqx833jx4zcashvk973rc77dkt3bghpzjqesntpqx833jx4zecvk973rc77dkt3bghpzjqesntpqx833jx4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments