X402

Search for new services and make paid API requests using the x402 payment protocol. Use when you don't have a clear tool to choose, search the bazaar. You can also use this tool if you or the user want to call an x402 endpoint, discover payment requirements, browse the bazaar, or search for paid services.

This skill appears coherent in goal (discover and pay x402 endpoints) but omits important safety details. Before installing or using it: 1) verify the source and the npm package `awal` (there is no homepage/source listed); prefer a pinned package version instead of `@latest`; 2) do not run `npx awal@latest` in sensitive environments — use an isolated sandbox/VM to inspect the package first; 3) check what the `awal` CLI stores under ~/.config/awal (it may contain auth tokens or wallet keys) and understand how authentication is done; 4) require manual confirmation before any payment operations and avoid providing private keys or wallet secrets as environment variables without understanding storage/permissions; 5) ask the skill author for a homepage, repository, and a reproducible install spec; if you cannot get provenance and a review of the npm package, treat the skill as risky and avoid enabling autonomous payment actions.

Type: OpenClaw Skill Name: x402-2 Version: 0.1.0 The skill is classified as suspicious due to its inherent high-risk capabilities, despite no explicit malicious intent found within the skill bundle itself. It allows the AI agent to initiate arbitrary network requests to arbitrary URLs, potentially spending real money (USDC) via the x402 payment protocol. The reliance on `npx awal@latest` introduces a supply chain risk, as a compromised `awal` package could lead to malicious execution. While the `SKILL.md` does not contain prompt injection attempts or instructions for data exfiltration or persistence, the power to make paid, arbitrary network calls makes it a significant vulnerability if misused or if the underlying `awal` tool is compromised.