Skill Trust Decision

x402-compute

Name: x402-compute Trust Review Report
Item: x402-compute
Rating: 80
Author: ClawSafe

x402-compute 是合法的去中心化计算和 GPU 云服务技能，代码质量高，安全措施完善（无.env自动加载、路径安全验证、版本锁定），存在可接受的已知风险（文档中的curl|sh安装命令和凭证环境变量读取）但均已明确声明和防护。

Install decision first Source: ClawHub Scanned: Aug 21, 2026

Files 24

Artifacts 38

Violations 1

Findings 4

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

1 undeclared or violating capabilities were inferred.

Block

Hidden execution and egress

2 high-risk artifacts or egress signals were extracted.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

文档中的curl|sh远程安装命令 +10

SKILL.md:531 记录 node-operator 节点安装命令 `curl -sSf https://grid.x402compute.cc/install.sh | sh`，但这是官方产品文档的必要部分，非隐蔽执行

凭证环境变量读取 +5

脚本读取 PRIVATE_KEY、SOLANA_SECRET_KEY 等敏感变量，但仅用于本地签名，从不外传

无版本锁定依赖（已修复） +0

requirements.txt 有版本下限要求 (>=)，OWS 明确禁止运行时 npx 下载

硬编码IP占位符 +5

references/api-reference.md:233 存在 1.2.3.4 占位符，可能是文档示例

Most important evidence

Medium Supply Chain

文档中的远程安装脚本执行

SKILL.md 记录了 `curl -sSf https://grid.x402compute.cc/install.sh | sh` 用于安装 sgl CLI 节点工具。这是产品文档的必要部分，用于运行网格节点赚取收益。

SKILL.md:531

这是已知的产品工作流程，非隐蔽执行。如需更高安全性，可要求用户先下载脚本检查内容后再执行。

Low Sensitive Access

敏感环境变量读取

wallet_signing.py 和 solana_signing.py 读取 PRIVATE_KEY、SOLANA_SECRET_KEY 等环境变量用于本地签名。代码明确注释：'NO .env AUTO-LOADING — credentials come only from the process environment'。

scripts/wallet_signing.py:70

这是正常功能，已通过安全注释和代码设计（禁止.env自动加载）防护。确保用户理解需要显式 export 凭证。

Low Supply Chain

硬编码IP占位符

api-reference.md 包含 1.2.3.4 硬编码 IP，可能是占位符示例。

references/api-reference.md:233

替换为实际端点域名或移除。

Info Doc Mismatch

OWS_BIN路径安全检查（正面）

wallet_signing.py:_resolve_ows_bin() 实现了全面的安全检查：要求绝对路径、验证文件存在、验证可执行权限、检查世界可写权限。代码注释明确解释了安全边界。

scripts/wallet_signing.py:95

这是良好的安全实践，值得肯定。

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred READ

SKILL.md:allowed-tools 声明 Read/Write，但实际代码仅用于读取 SSH 公钥文件

Network Pass

Declared READ

→

Inferred READ

所有请求均发往官方 API 端点 compute.x402layer.cc 和 grid.x402compute.cc

Shell Pass

Declared WRITE

→

Inferred WRITE

Bash 工具用于执行 pip install 和 sgl CLI，但需用户授权

Environment Block

Declared NONE

→

Inferred READ

wallet_signing.py:70 读取 PRIVATE_KEY 等，但代码明确注释禁止 .env 自动加载，这是防护措施而非窃取

Suspicious artifacts and egress

Critical Dangerous Command

curl -sSf https://grid.x402compute.cc/install.sh | sh

SKILL.md:531

High IP Address

1.2.3.4

references/api-reference.md:233

Medium External URL

https://docs.x402layer.cc/agentic-access/x402-compute

SKILL.md:36

Medium External URL

https://cloud.x402compute.cc

SKILL.md:40

Medium External URL

https://compute.x402layer.cc

SKILL.md:85

Medium External URL

https://grid.x402compute.cc

SKILL.md:87

Medium External URL

https://staking.x402layer.cc

SKILL.md:100

Medium External URL

https://compute.x402layer.cc/compute/provision

SKILL.md:272

Medium External URL

https://compute.x402layer.cc/compute/instances/

SKILL.md:316

Medium External URL

https://compute.x402layer.cc/compute/credits/topup

SKILL.md:363

Medium External URL

https://compute.x402layer.cc/compute/credits/balance

SKILL.md:370

Medium Wallet Address

0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168

SKILL.md:411

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
eth-account	`>=0.8.0`	pip	No	版本下限锁定
web3	`>=6.0.0`	pip	No	版本下限锁定
requests	`>=2.28.0`	pip	No	版本下限锁定
solders	`>=0.20.0`	pip	No	Solana SDK，版本下限锁定

File composition

24 files · 4871 lines

Markdown 9 files · 2603 linesPython 14 files · 2264 linesText 1 files · 4 lines

Files of concern · 7

scripts/get_one_time_password.py Python · 72 lines

SKILL.md Markdown · 789 lines

文档中的远程安装脚本执行 · curl -sSf https://grid.x402compute.cc/install.sh | sh · https://docs.x402layer.cc/agentic-access/x402-compute · https://cloud.x402compute.cc · https://compute.x402layer.cc · https://grid.x402compute.cc · https://staking.x402layer.cc · https://compute.x402layer.cc/compute/provision · https://compute.x402layer.cc/compute/instances/ · https://compute.x402layer.cc/compute/credits/topup · https://compute.x402layer.cc/compute/credits/balance · 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 · https://grid.x402compute.cc/v1/models · https://grid.x402compute.cc/grid/capacity · https://grid.x402compute.cc/v1/chat/completions · https://grid.x402compute.cc/v1 · https://grid.x402compute.cc/install.sh · https://docs.x402layer.cc/cloud/provide/node-setup · https://compute.x402layer.cc/pods/catalog · https://compute.x402layer.cc/pods · https://openrouter.ai/api/v1 · https://compute.x402layer.cc/pods/trial · https://compute.x402layer.cc/pods/ · https://x402compute.cc

references/processors.md Markdown · 364 lines

https://processors.x402compute.cc · 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

scripts/wallet_signing.py Python · 538 lines

敏感环境变量读取 · OWS_BIN路径安全检查（正面）

references/api-reference.md Markdown · 484 lines

硬编码IP占位符 · 1.2.3.4 · https://grid.x402compute.cc/v1/providers?model=llama-3.2-3b · https://grid.x402compute.cc/grid/nodes/

scripts/solana_signing.py Python · 299 lines

https://api.mainnet-beta.solana.com · 11111111111111111111111111111111

references/node-operator.md Markdown · 193 lines

https://docs.x402layer.cc/staking/introduction · https://docs.x402layer.cc/cloud/provide/earnings · https://docs.x402layer.cc/cloud/provide/requirements · https://docs.x402layer.cc/cloud/provide/cli · https://docs.x402layer.cc/cloud/provide/staking

Other files · agent-pods.md · agent_pod.py · provision.py · ai-machines.md · ows_cli.py

24 files · 202.2 KB · 4871 lines

Markdown 9f · 2603LPython 14f · 2264LText 1f · 4L

├─ ▾ 📁 references

│ ├─ 📝 agent-pods.md Markdown 293L · 15.1 KB

│ ├─ 📝 agent-vault.md Markdown 101L · 5.2 KB

│ ├─ 📝 ai-machines.md Markdown 213L · 9.6 KB

│ ├─ 📝 api-reference.md Markdown 484L · 14.2 KB

│ ├─ 📝 node-operator.md Markdown 193L · 7.5 KB

│ ├─ 📝 openwallet-ows.md Markdown 92L · 2.5 KB

│ └─ 📝 processors.md Markdown 364L · 18.9 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 agent_pod.py Python 316L · 14.1 KB

│ ├─ 🐍 browse_plans.py Python 59L · 1.7 KB

│ ├─ 🐍 browse_regions.py Python 38L · 860 B

│ ├─ 🐍 create_api_key.py Python 57L · 1.6 KB

│ ├─ 🐍 destroy_instance.py Python 75L · 2.4 KB

│ ├─ 🐍 extend_instance.py Python 164L · 6.0 KB

│ ├─ 🔑 get_one_time_password.py ⚠ Python 72L · 2.1 KB

│ ├─ 🐍 instance_details.py Python 66L · 2.0 KB

│ ├─ 🐍 list_instances.py Python 52L · 1.4 KB

│ ├─ 🐍 ows_cli.py Python 173L · 6.4 KB

│ ├─ 🐍 provision.py Python 275L · 11.6 KB

│ ├─ 🐍 resize_instance.py Python 80L · 2.6 KB

│ ├─ 🐍 solana_signing.py Python 299L · 11.1 KB

│ └─ 🐍 wallet_signing.py Python 538L · 18.4 KB

├─ 📝 SKILL.md Markdown 789L · 43.5 KB

├─ 📄 requirements.txt Text 4L · 64 B

└─ 📝 skill-card.md Markdown 74L · 3.5 KB

Security positives

明确禁止 .env 自动加载凭证（防止静默凭证读取）

OWS_BIN 路径安全验证（绝对路径、可执行权限、世界可写检查）

明确禁止运行时 npx 下载 OWS 包

私钥仅用于本地签名，从不外传网络

requirements.txt 有版本下限锁定

SKILL.md 和 skill-card.md 有完整安全警告

提供 COMPUTE_MAX_SPEND_USD 限额控制

支持支付确认交互（skip_confirm 选项）

所有网络请求指向官方域名（非IP或未知端点）

代码注释详尽，解释了安全决策