中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 0/100
Last scan:2 days ago Rescan
0 /100
xtown-skills
Skills for BNBTown - the first ERC-8004 & x402 autonomous Agent town on BNB Chain. Includes DeFi operations (swap, lend, stake, launch), wallet management via Unibase Pay, and on-chain identity via Unibase AIP.
Pure markdown documentation skill with no executable code, scripts, or hidden behavior. All capabilities are clearly declared and map to standard AI agent operations via documented API calls.
Skill Namextown-skills
Duration33.5s
Enginepi
✓
Safe to install
This skill is safe to use. No action required.
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No file operations; config.json writes are implicit AI agent behavior
Network NONE READ ✓ Aligned All HTTP calls to xtown.io, unibase.com, BSC are documented in reference files
Shell NONE NONE — No shell execution; curl examples are documentation only
Environment NONE READ ✓ Aligned References to env vars documented in config.md
Skill Invoke NONE NONE — References other skills but does not invoke them internally
Clipboard NONE NONE — Not referenced
Browser NONE NONE — Not referenced
Database NONE NONE — Not referenced
22 findings
🔗
Medium External URL 外部 URL
https://api.xtown.io
README.md:66
🔗
Medium External URL 外部 URL
https://fapi.asterdex.com/fapi/v3
references/aster.md:15
🔗
Medium External URL 外部 URL
https://api.pay.unibase.com
references/config.md:8
🔗
Medium External URL 外部 URL
https://api.aip.unibase.com
references/config.md:11
🔗
Medium External URL 外部 URL
https://bscscan.com/tx/
references/launch.md:39
💰
Medium Wallet Address 加密货币钱包地址
0xcE24439F2D9C6a2289F741120FE202248B666666
references/redpacket.md:34
🔗
Medium External URL 外部 URL
https://gateway.aip.unibase.com/gateway/tasks/poll?agent=my_pioneer
references/register.md:98
🔗
Medium External URL 外部 URL
https://gateway.aip.unibase.com/gateway/agents/heartbeat
references/register.md:99
🔗
Medium External URL 外部 URL
https://x.com/Unibase_AI
references/setup.md:29
🔗
Medium External URL 外部 URL
https://x.com/BinanceWallet
references/setup.md:30
🔗
Medium External URL 外部 URL
https://x.com/PancakeSwap
references/setup.md:31
🔗
Medium External URL 外部 URL
https://x.com/lista_dao
references/setup.md:32
🔗
Medium External URL 外部 URL
https://x.com/fourdotmemezh
references/setup.md:33
🔗
Medium External URL 外部 URL
https://x.com/VenusProtocol
references/setup.md:34
🔗
Medium External URL 外部 URL
https://x.com/CoinMarketCap
references/setup.md:35
💰
Medium Wallet Address 加密货币钱包地址
0x0000000000000000000000000000000000000000
references/swap.md:34
💰
Medium Wallet Address 加密货币钱包地址
0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c
references/swap.md:35
💰
Medium Wallet Address 加密货币钱包地址
0x40b8129B786D766267A7a118cF8C07E31CDB6Fde
references/swap.md:37
💰
Medium Wallet Address 加密货币钱包地址
0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d
references/swap.md:38
💰
Medium Wallet Address 加密货币钱包地址
0x55d398326f99059fF775485246999027B3197955
references/swap.md:39
💰
Medium Wallet Address 加密货币钱包地址
0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82
references/swap.md:40
🔗
Medium External URL 外部 URL
https://bsc-dataseed.bnbchain.org
references/wallet.md:67

File Tree

19 files · 55.8 KB · 1653 lines
Markdown 19f · 1653L
├─ ▾ 📁 references
│ ├─ 📝 aster.md Markdown 102L · 2.5 KB
│ ├─ 📝 cmc.md Markdown 87L · 2.6 KB
│ ├─ 📝 config.md Markdown 61L · 2.5 KB
│ ├─ 📝 errors.md Markdown 18L · 1.1 KB
│ ├─ 📝 invite.md Markdown 29L · 1.1 KB
│ ├─ 📝 launch.md Markdown 85L · 2.3 KB
│ ├─ 📝 lend.md Markdown 109L · 2.3 KB
│ ├─ 📝 map.md Markdown 63L · 2.1 KB
│ ├─ 📝 meme-rush.md Markdown 85L · 2.8 KB
│ ├─ 📝 protocol.md Markdown 47L · 1.2 KB
│ ├─ 📝 redpacket.md Markdown 98L · 2.6 KB
│ ├─ 📝 register.md Markdown 102L · 3.9 KB
│ ├─ 📝 setup.md Markdown 77L · 3.7 KB
│ ├─ 📝 stake.md Markdown 118L · 2.9 KB
│ ├─ 📝 swap.md Markdown 155L · 4.8 KB
│ ├─ 📝 taskmarket.md Markdown 84L · 2.4 KB
│ └─ 📝 wallet.md Markdown 73L · 4.4 KB
├─ 📝 README.md Markdown 157L · 5.6 KB
└─ 📝 SKILL.md Markdown 103L · 4.9 KB

Security Positives

✓ Pure markdown documentation - no executable code
✓ No scripts or binary files present
✓ All external API calls are documented with clear purposes
✓ Comprehensive security warnings for transaction validation and prompt injection
✓ Credential handling stays local (config.json) - no exfiltration observed
✓ Mandatory owner confirmation required before any DeFi operation
✓ Token whitelist restricts swaps to known assets
✓ Curl commands in docs are illustrative examples only, not actual execution paths
✓ Open-source references to legitimate DeFi platforms (PancakeSwap, Venus, Lista DAO, CoinMarketCap, Four.meme)