Ntriq X402 Code Review Batch

Batch AI code review for up to 500 snippets. Flat $15.00 USDC via x402.

This skill has notable inconsistencies and privacy risks. It claims "local inference" but its runtime instructions send your code snippets to a remote endpoint and require an X-PAYMENT header (not declared in the metadata). Before installing or using it: (1) Do not send real secrets or private code — test only with non-sensitive snippets. (2) Ask the publisher how to obtain and protect the X-PAYMENT header/token and why that credential isn't declared in metadata. (3) Clarify the "local inference" claim vs. the documented remote API — request written documentation or an SDK. (4) Verify the domain (x402.ntriq.co.kr) and the payment protocol, and confirm privacy/retention policies (will your code be stored or used to train models?). (5) If you cannot get satisfactory answers, avoid using the skill for sensitive code. My confidence is medium; additional information (publisher contact, API docs, payment/token handling, and privacy/retention policy) would likely change the assessment.

Type: OpenClaw Skill Name: ntriq-x402-code-review-batch Version: 1.0.0 The skill instructs the agent to send up to 500 code snippets to an external endpoint (https://x402.ntriq.co.kr/code-review-batch) for a fee of $15.00 USDC via the x402 protocol. While this aligns with the stated purpose of a batch code review service, it facilitates the exfiltration of potentially sensitive source code to a third-party domain and includes instructions for automated financial transactions, which are high-risk behaviors.