Skills/ClawHub/twzrd-trust

twzrd-trust@1.13.34

VERIFIED

Publisher claims: "Discover x402 callables then check the seller BEFORE paying. Free resource join (GET /v1/intel/resources) lists listed|live_402 claims; free preflight returns a ReadinessCard (allow / warn / block) from the observed Solana x402 corpus. Composes with any x402 payer skill: discover → merchant_card wash refuse → preflight → gate_eval (AutoGate) when you control signing → optional pay; abort on decision=block. Honesty: price_kind with price; leftover 0.05 is not a unit price; wash_flagged hard-stop (never soft-allow); refuse path is block / merchant refuse / refuse-fixture. WHAT YOU GET FREE: resource join (source of truth), wash overlay on ingested listings (PayAI not_indexed), pre-spend ReadinessCard, merchant_card (wash_flagged refuse), wallet scores, secondary payer leaderboard research, counterparty + facilitator footprint, wash/sybil detection, batch + compare, offline receipt verify. POST /settle may best-effort attach merchant_attach (not a Path A paid-attest / twzrd_receipt SKU). PAID (x402, USDC on a rail advertised by the live 402): first hop is the score-only teaser at GET /v1/intel/quick/GFpLvocNdEjnSsLH3VJQL6wGcjGxTbUBrj6fqN3Qe1Gs (0.001 USDC). Optional portable V7 at GET /v1/intel/trust/GFpLvocNdEjnSsLH3VJQL6wGcjGxTbUBrj6fqN3Qe1Gs (0.05 USDC); merchant track-record at GET /v1/intel/merchant/GFpLvocNdEjnSsLH3VJQL6wGcjGxTbUBrj6fqN3Qe1Gs (0.05 USDC). TRIGGERS: should I pay this, is this wallet safe, check seller, x402 preflight, scam check, counterparty risk, wallet reputation, trust score, verify receipt, before paying, solana wallet check, agent trust, readiness card, wash flagged, merchant card, resource join, discover x402, facilitator settle, merchant attach, track record, laso, agentX402Pay, managed wallet, product listing check, check_listing, shopping check, before buying a product, listing claims" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher twzrd-sol · joined 0 days agoInstalls 1,996Last detonated 3 h ago
$clawhub install twzrd-trust
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:193 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:147 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:509 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:186 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:508 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:825 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04