by 安全扫描
OpenClaw
可疑
high confidenceThe skill's runtime instructions require sending screenshots and a payment header to a remote endpoint, but the SKILL.md also claims '100% local inference' and does not explain how to provide the required payment credential — these inconsistencies and the obvious data-exfiltration path are concerning.
评估建议
Do not send sensitive screenshots to this skill until the developer clarifies payment and privacy. Specifically: (1) Ask the vendor to explain the '100% local inference' claim versus the remote API — which is true? (2) Ask how to generate/provide the X-PAYMENT header (is this a signed wallet token? where is it stored?), and request that required credentials be declared in the skill manifest. (3) Confirm the service's data retention, logging, and deletion policy for uploaded screenshots. (4) Veri...详细分析 ▾
⚠ 用途与能力
The skill is described as extracting data from screenshots and advertising '100% local inference on Mac Mini', but the runtime instructions require POSTing image URLs to https://x402.ntriq.co.kr. That is internally inconsistent: local inference implies processing on the user's device, while the documented API is remote. The payment requirement (X-PAYMENT header) is also essential to use the service but no credential mechanism is declared.
⚠ 指令范围
SKILL.md instructs the agent to send up to 500 screenshot URLs to a third-party endpoint and include an X-PAYMENT header. It does not explain how to construct/provide that header, how to handle local image files (it only shows URLs), or what data the service stores or logs. Submitting screenshots (which often contain sensitive data) to an external API is a clear data-exfiltration path and should be explicit and justified.
✓ 安装机制
Instruction-only skill with no install spec or code files; nothing is written to disk by the skill itself. This is the lowest-risk install model, assuming the runtime instructions are honest.
⚠ 凭证需求
No environment variables or credentials are declared, yet the API requires an X-PAYMENT header to pay $6.00 USDC. The SKILL.md references Base mainnet / EIP-3009 gasless payments but gives no guidance on how the agent or user should supply cryptographic signatures or payment tokens. The lack of declared credential requirements is disproportionate to the documented payment requirement and leaves ambiguity about where secrets must come from.
✓ 持久化与权限
The skill is not always-enabled and does not request persistent system privileges. It does not attempt to modify other skills or system-wide settings in the provided instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/15
- Initial release of ntriq-x402-screenshot-data-batch. - Batch extract text, UI elements, layout, and data tables from up to 500 screenshots in one call. - Flat $6.00 USDC payment with processing done entirely on Mac Mini. - Supports extraction options: full, text-only, or data-only. - Provides results in JSON with detailed analysis per screenshot. - Payment via x402 protocol on Base mainnet (EIP-3009 gasless).
● 无害
安装命令
点击复制官方npx clawhub@latest install ntriq-x402-screenshot-data-batch
镜像加速npx clawhub@latest install ntriq-x402-screenshot-data-batch --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Ntriq X402 Screenshot Data Batch — 技能工具 安装说明： 安装命令：npx clawhub@latest install ntriq-x402-screenshot-data-batch
技能文档
Extract text, UI elements, layout structure, and data tables from up to 500 screenshots in one call. Flat $6.00 USDC. 100% local inference on Mac Mini.
How to Call
POST https://x402.ntriq.co.kr/screenshot-data-batch Content-Type: application/json X-PAYMENT:
{ "images": [ "https://example.com/screen1.png", "https://example.com/screen2.png" ], "extract_type": "full" }
Parameters
| Parameter | Type | Required | Description | ||
|---|---|---|---|---|---|
images | array | ✅ | Screenshot URLs (max 500) | ||
extract_type | string | ❌ | full \ | text \ | data (default: full) |
language | string | ❌ | Output language (default: en) |
Example Response
{
"status": "ok",
"count": 2,
"results": [
{
"image_url": "https://example.com/screen1.png",
"status": "ok",
"extract_type": "full",
"analysis": "Dashboard showing sales metrics: Total Revenue $124,500, Active Users 3,421..."
}
]
}
Payment
- Price: $6.00 USDC flat (up to 500 screenshots)
- Network: Base mainnet (EIP-3009 gasless)
- Protocol: x402
curl https://x402.ntriq.co.kr/services