扫描报告
0 /100
ripley-pocket
API client skill for Ripley Pocket — M2M micro-payment gateway for AI agents using Monero (XMR)
Pure documentation-only skill describing a Monero payment API client with no executable code, no hidden functionality, and behavior fully consistent with its declared purpose.
可以安装
No action needed. The skill is a safe documentation-only API client skill.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | SKILL.md contains no file operations |
| 网络访问 | NONE | NONE | — | SKILL.md documents an API client; no network calls are made by the skill itself |
| 命令执行 | NONE | NONE | — | SKILL.md contains only documentation and example curl commands |
| 环境变量 | NONE | NONE | — | SKILL.md declares requiredEnv API_KEY as documented configuration, no hidden env… |
| 技能调用 | NONE | NONE | — | No skill chaining or invocation patterns found |
| 剪贴板 | NONE | NONE | — | No clipboard access in documentation |
| 浏览器 | NONE | NONE | — | No browser automation documented |
| 数据库 | NONE | NONE | — | No database access in documentation |
5 项发现
中危 外部 URL 外部 URL
https://pocket.ripley.run SKILL.md:8 中危 钱包地址 加密货币钱包地址
bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh SKILL.md:146 中危 外部 URL 外部 URL
https://api.kyc.rip/v2/exchange/status/abc123 SKILL.md:161 中危 外部 URL 外部 URL
https://api.kyc.rip/v2/exchange/status/xyz789 SKILL.md:195 中危 外部 URL 外部 URL
https://xmr402.org SKILL.md:278 目录结构
1 文件 · 15.5 KB · 473 行 Markdown 1f · 473L
└─
SKILL.md
Markdown
安全亮点
✓ Pure documentation skill with no executable code or scripts
✓ All described behavior (payment API, balance checks, cross-chain swaps) matches the documentation
✓ No obfuscation, base64, or anti-analysis patterns present
✓ No credential harvesting beyond the declared API_KEY environment variable
✓ External URLs are legitimate payment gateway and protocol references
✓ No sensitive file path access (ssh, aws, .env, etc.)
✓ No supply chain risks as there are no dependencies
✓ XMR402 protocol documentation is a legitimate open standard