📰 SUPAH Research Intelligence
v1.3.0Professional-grade web research with multi-source verification and credibility scoring. Cross-references multiple sources, scores reliability, and delivers v...
0· 109·1 当前·1 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill appears to implement what it claims (web research via api.supah.ai) but contains inconsistencies and an embedded micropayment directive (x402/pay-to address) that could cause unexpected charges; review payment behavior and a few mismatches before installing.
评估建议
What to check before installing:
- Payment risk: SKILL.md metadata includes an x402 micropayment configuration and a 'payTo' Base address. Confirm how your OpenClaw agent/runtime handles x402 payments and whether it will automatically send USDC to that address for each call. This can incur real on-chain costs.
- SUPAH_API_BASE mismatch: the registry marks SUPAH_API_BASE as required but the code falls back to https://api.supah.ai if it's not set. Decide whether you need to override the endpoint o...详细分析 ▾
ℹ 用途与能力
Name/description match the implementation: the code and SKILL.md call api.supah.ai to perform multi-source research, credibility scoring, verification, and report generation. However, SKILL.md/metadata embed an x402 micropayment configuration (currency, maxPerCall, payTo address) as part of the runtime metadata — this is functionally part of the skill (it expects on-chain micropayments to be made automatically by the agent runtime) and is not explicitly called out in the short description. Also the declared required binaries include 'curl' even though the provided node script uses built-in http/https only.
✓ 指令范围
Runtime instructions and the index.js are narrowly scoped to contacting the SUPAH API endpoints and printing results; they do not read other local files or unexpected environment variables. The instructions do, however, include a payment expectation (x402 automatic micropayments) which causes network activity beyond pure data retrieval (economic action).
✓ 安装机制
No external download/extract/install step is present in the registry metadata (instruction-only install). The package includes a local script (index.js) and a package.json; nothing is fetched from arbitrary URLs at install time. README suggests typical install paths (openclaw CLI, git, npm link).
⚠ 凭证需求
Registry/metadata declare SUPAH_API_BASE as a required env var, but the code defaults to 'https://api.supah.ai' if the variable is not set — mismatch between 'required' and actual code behavior. No API keys or secrets are requested (good), but the embedded x402 payment metadata and 'payTo' on-chain address means the skill expects the agent/platform to perform micropayments; that is a material financial permission that is not obvious from the single-line description. Also 'curl' is listed as required but not used by the provided code.
✓ 持久化与权限
always is false and the skill does not request persistent system privileges or attempt to modify other skills or system-wide config. The agent will be able to invoke the skill autonomously (default behavior), which combined with the payment metadata increases the blast radius for unexpected charges — but autonomous invocation itself is platform-default and not a standalone flag.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.02026/3/22
Removed all API key references. x402 only.
● Pending
安装命令 点击复制
官方npx clawhub@latest install supah-research-intelligence
镜像加速npx clawhub@latest install supah-research-intelligence --registry https://cn.clawhub-mirror.com
技能文档
Professional-grade web research with multi-source verification and credibility scoring for AI agents.
Description
Transform your agent into a professional researcher. Get verified facts, credible sources, and comprehensive reports on any topic with automatic fact-checking and citation tracking.
Features
- Multi-Source Research: Query 3-5 authoritative sources per topic
- Credibility Scoring: Evaluate source reliability and authority
- Fact Verification: Cross-check claims across multiple sources
- Citation Tracking: Auto-generate bibliographies with preserved links
- Research Reports: Executive summaries with confidence scoring
Usage
- "Research the latest developments in AI safety"
- "Verify this claim: [statement]"
- "What's the credibility of this source: [url]"
- "Generate a research report on quantum computing"
- "Find 5 reliable sources about [topic]"
Pricing
x402 USDC micropayments on Base — pay per call, no subscriptions.
| Action | Price | What You Get |
|---|---|---|
| Single source query | $0.02 | One source research + summary |
| Multi-source research | $0.05 | 3-5 sources cross-referenced |
| Credibility analysis | $0.10 | Source reliability report |
| Full research report | $0.25 | Comprehensive report with citations |
| Fact verification | $0.05 | Cross-check claim across sources |
Use Cases
- Crypto: Project research, due diligence, protocol analysis
- Business: Market research, competitor analysis
- Academic: Literature review, citation management
- Journalism: Fact verification, source vetting
Links
- Website: https://supah.ai
- API: https://api.supah.ai
- Telegram: https://t.me/SUPAH_Based
- X: https://x.com/Supah_BASED_AI
License
MIT
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制