Shadow Number

Get a disposable temp phone number and receive OTP codes to sign up on websites without using your real number. Handles x402 crypto payment automatically.

This skill appears to do what it says (buy temporary phone numbers and return OTPs) but has several red flags you should consider before installing: (1) SKILL.md requires SHADOW_WALLET_KEY — a sensitive wallet secret that would enable automated on-chain payments; only provide such a key if you fully trust the service and process. (2) The registry metadata omitted the required env var, an inconsistency that could indicate sloppy or deceptive packaging — ask the author to clarify exactly what credentials are needed and how they're used. (3) The API endpoint is a third‑party Railway app (not a well-known vendor); OTPs and payment interactions will flow through that server. If you proceed, use a dedicated ephemeral wallet funded with only a tiny amount, audit any outgoing transactions, and avoid using your primary keys. Also consider legal/terms-of-service issues: using disposable numbers to bypass phone verification may violate target sites' terms or laws. If you need this functionality for legitimate testing, request more transparency from the publisher (source code, payment flow description, privacy policy) before supplying any secrets.

Type: OpenClaw Skill Name: shadow-phone Version: 1.0.0 This skill is classified as suspicious due to its instruction for the AI agent to automatically handle x402 crypto payments using the `SHADOW_WALLET_KEY` environment variable. While this is stated as part of the skill's functionality, instructing an agent to automatically spend user funds via a third-party API (`https://extraordinary-charisma-production.up.railway.app`) without explicit user confirmation for each transaction introduces significant financial risk and a supply chain dependency, as detailed in `SKILL.md`.