扫描报告
0 /100
smoothsend-gasless
Guide for sponsoring gas fees on Aptos dApps using SmoothSend SDK for gasless transactions
This is a legitimate documentation skill for SmoothSend's Aptos gasless transaction SDK with no malicious behavior detected.
可以安装
This skill is safe to use. No security concerns identified.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file system access in documentation or code |
| 网络访问 | NONE | NONE | — | Only references external documentation URLs |
| 命令执行 | NONE | NONE | — | No shell execution commands |
| 环境变量 | NONE | NONE | — | Mentions env vars for API keys only (legitimate use) |
| 技能调用 | NONE | NONE | — | No skill invocation capabilities |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database access |
6 项发现
中危 外部 URL 外部 URL
https://smoothsend.xyz SKILL.md:19 中危 外部 URL 外部 URL
https://docs.smoothsend.xyz/pricing SKILL.md:24 中危 外部 URL 外部 URL
https://dashboard.smoothsend.xyz/billing SKILL.md:129 中危 外部 URL 外部 URL
https://docs.smoothsend.xyz SKILL.md:159 中危 外部 URL 外部 URL
https://dashboard.smoothsend.xyz SKILL.md:161 中危 外部 URL 外部 URL
https://www.npmjs.com/package/@smoothsend/sdk SKILL.md:162 目录结构
1 文件 · 5.9 KB · 165 行 Markdown 1f · 165L
└─
SKILL.md
Markdown
依赖分析 2 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
@smoothsend/sdk | latest | npm | 否 | Official SmoothSend SDK for gasless transactions |
@aptos-labs/wallet-adapter-react | latest | npm | 否 | Official Aptos wallet adapter |
安全亮点
✓ Clear and accurate documentation of service capabilities
✓ Explicitly states this is a paid commercial service
✓ Good security practices: warns against hardcoding API keys
✓ Recommends using environment variables for credentials
✓ No shell execution, credential harvesting, or data exfiltration
✓ No obfuscation or hidden functionality
✓ Standard npm package dependencies from legitimate sources
✓ Addresses error handling (402 for insufficient credits)