checkout@0.1.26
VERIFIED· install onlyPublisher claims: "Pay OpenRouter, or any Coinbase invoice, with the crypto you already hold: USDT/USDC on Solana, BNB Chain, Ethereum, Polygon or Arbitrum, USDC on Base or Stellar, BTC over Lightning, or native ETH, BNB, SOL or POL. No Coinbase account." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
<summary><b>Codex CLI</b> — AGENTS.md, or run it directly</summary> Codex reads `AGENTS.md` from the project root. Add a standing instruction so it knows how toFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.<summary><b>Claude Code</b> — install the skill, or paste the one-liner</summary> This repo is a Claude Code skill: it ships `SKILL.md` plus the executables in Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.<summary><b>OpenCode</b> — AGENTS.md, or run it directly</summary> OpenCode also reads `AGENTS.md` from the project root, so the Codex snippet above works unchaFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.<summary><b>Cursor</b> — .cursor/rules, or run it directly</summary> Add a project rule at `.cursor/rules/rozo-checkout.mdc`: ``` To pay an OpenRouter / CoinbasFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.<summary><b>Cline</b> — .clinerules, or run it directly</summary> Cline reads standing instructions from `.clinerules` in the project root: ``` To pay an OpenRoFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.<summary><b>Pi</b> — run the one-liner in a session</summary> Pi is a BYOK terminal agent whose built-in tools include `bash`, so it can run the command directlFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.<summary><b>Hermes Agent</b> — run the one-liner in a session</summary> Hermes Agent (Nous Research) has shell access and its own skill system. Start it with `hFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for @rozoai/checkout@0.1.26 as of 2d ago. This is the package itself, not its dependencies.