{"slug":"clawguard-duckdns-org-v1-skill-scan-d69e09ec","name":"clawguard.duckdns.org/v1/skill-scan","summary":"Static malware and prompt-injection scan of an OpenClaw / AgentSkills bundle before install. Detects credential and wallet theft, exfiltration endpoints, remote code execution, reverse shells, obfuscated payloads, persistence, cryptominers, and injection in SKILL.md. Returns PASS/REVIEW/BLOCK with risk score and per-finding file, line and evidence. bundle = {files:[{path,content}]} or {github:'owner/repo/path'} or {content:'...'}.","status":"unreachable","headings":[{"slug":"security","title":"Security & risk checks"},{"slug":"code","title":"Code & developer tools"}],"indexable":false,"listed_since":"2026-10-25T17:53:20.381681Z","sources":[{"source":"x402_bazaar","external_id":"https://clawguard.duckdns.org:8082/v1/skill-scan","owner_address":"0x83a18b50f9b894ca5ba28ad54585d9c80058fbcd","seen_at":"2026-11-13T10:27:20.777145Z","removed_at":null}],"endpoints":[{"url":"https://clawguard.duckdns.org:8082/v1/skill-scan","host":"clawguard.duckdns.org","protocol":"x402","state":"unreachable","last_probe_at":"2026-11-10T21:31:40.898918Z","last_ok_at":null,"tools_count":null,"tools_changed_at":null,"uptime_24h":null,"uptime_30d":0.0}],"also_listed_as":[{"slug":"clawguard-duckdns-org-f2871adc","name":"clawguard.duckdns.org"}],"payment_options":[],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":1,"last_paid_at":"2026-10-22T10:12:32.073Z","reported_at":"2026-11-13T10:27:20.777145Z"},"assessment":{"method":"2026.11.4","checks":[{"id":"answers","state":"fail","reason":"Has not answered a check yet."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 19 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"1 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":0,"applicable":4,"contradicted":false,"computed_at":"2026-11-13T19:30:13.389576Z"},"identity":{"endpoint_domains":["clawguard.duckdns.org"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}