Skill Trust Decision
x402-compute
x402-compute 是合法的云算力供给技能，处理区块链支付签名，无凭证外泄行为，但存在已记录在案的远程脚本执行风险
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
2 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
4 dependency or supply-chain issues need attention.
What drove the risk score up
文档中远程脚本执行 +10
SKILL.md:525 记录 curl|sh 安装 sgl CLI，但为显式声明的 node-operator 功能
依赖无版本锁定 +5
requirements.txt 中 eth-account, web3, solders 等使用 >= 约束
OWS 二进制执行保护 +-5
wallet_signing.py 实现了严格的路径验证和 world-writable 检查
Most important evidence
Medium Supply Chain
文档中记录远程脚本执行
SKILL.md:525 包含 curl -sSf https://grid.x402compute.cc/install.sh | sh 用于安装 node-operator CLI。这是显式声明的功能（Provide Compute），但远程脚本执行存在供应链风险
SKILL.md:525 Node-operator 用户应在执行前验证 install.sh 内容，或使用 npm install -g @singularity-layer/cli
Low Supply Chain
依赖无版本锁定
requirements.txt 中所有依赖使用 >= 约束而非固定版本，可能引入依赖混淆攻击风险
requirements.txt:1 考虑锁定到已知安全版本，如 eth-account==0.12.0
Info Credential Theft
凭证读取但无外泄
代码读取 PRIVATE_KEY, SOLANA_SECRET_KEY 等环境变量用于本地签名，未发现任何 exfiltration 行为
scripts/wallet_signing.py:94 符合安全实践；继续确保密钥仅用于本地签名
Declared capability vs actual capability
Filesystem Pass
Declared WRITE
→ Inferred WRITE
scripts/provision.py:233 读取 SSH 密钥文件; scripts/get_one_time_password.py:50 写入 .compute_password_* Network Pass
Declared READ
→ Inferred READ
所有 API 调用指向 compute.x402layer.cc 和 grid.x402compute.cc 等合法域名 Shell Pass
Declared WRITE
→ Inferred WRITE
scripts/wallet_signing.py:139 通过 subprocess.run 执行 OWS 二进制 Environment Pass
Declared READ
→ Inferred READ
PRIVATE_KEY, SOLANA_SECRET_KEY 等从 os.getenv 读取，无 .env 自动加载 Suspicious artifacts and egress
Critical Dangerous Command
curl -sSf https://grid.x402compute.cc/install.sh | sh SKILL.md:525
High IP Address
1.2.3.4 references/api-reference.md:233
Medium External URL
https://docs.x402layer.cc/agentic-access/x402-compute SKILL.md:31
Medium External URL
https://cloud.x402compute.cc SKILL.md:35
Medium External URL
https://compute.x402layer.cc SKILL.md:80
Medium External URL
https://grid.x402compute.cc SKILL.md:82
Medium External URL
https://staking.x402layer.cc SKILL.md:95
Medium External URL
https://compute.x402layer.cc/compute/provision SKILL.md:266
Medium External URL
https://compute.x402layer.cc/compute/instances/ SKILL.md:310
Medium External URL
https://compute.x402layer.cc/compute/credits/topup SKILL.md:357
Medium External URL
https://compute.x402layer.cc/compute/credits/balance SKILL.md:364
Medium Wallet Address
0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 SKILL.md:405
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| eth-account | >=0.8.0 | pip | No | 无版本锁定 |
| web3 | >=6.0.0 | pip | No | 无版本锁定 |
| requests | >=2.28.0 | pip | No | 无版本锁定 |
| solders | >=0.20.0 | pip | No | 无版本锁定 |
File composition
23 files · 4708 lines
Markdown 8 files · 2440 linesPython 14 files · 2264 linesText 1 files · 4 lines
Files of concern · 7
scripts/get_one_time_password.py SKILL.md 文档中记录远程脚本执行 · curl -sSf https://grid.x402compute.cc/install.sh | sh · https://docs.x402layer.cc/agentic-access/x402-compute · https://cloud.x402compute.cc · https://compute.x402layer.cc · https://grid.x402compute.cc · https://staking.x402layer.cc · https://compute.x402layer.cc/compute/provision · https://compute.x402layer.cc/compute/instances/ · https://compute.x402layer.cc/compute/credits/topup · https://compute.x402layer.cc/compute/credits/balance · 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 · https://grid.x402compute.cc/v1/models · https://grid.x402compute.cc/grid/capacity · https://grid.x402compute.cc/v1/chat/completions · https://grid.x402compute.cc/v1 · https://grid.x402compute.cc/install.sh · https://docs.x402layer.cc/cloud/provide/node-setup · https://compute.x402layer.cc/pods/catalog · https://compute.x402layer.cc/pods · https://openrouter.ai/api/v1 · https://compute.x402layer.cc/pods/trial · https://compute.x402layer.cc/pods/ · https://x402compute.cc
scripts/wallet_signing.py 凭证读取但无外泄
references/processors.md https://processors.x402compute.cc · 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
references/api-reference.md 1.2.3.4 · https://grid.x402compute.cc/v1/providers?model=llama-3.2-3b · https://grid.x402compute.cc/grid/nodes/
scripts/solana_signing.py https://api.mainnet-beta.solana.com · 11111111111111111111111111111111
references/node-operator.md https://docs.x402layer.cc/staking/introduction · https://docs.x402layer.cc/cloud/provide/earnings · https://docs.x402layer.cc/cloud/provide/requirements · https://docs.x402layer.cc/cloud/provide/cli · https://docs.x402layer.cc/cloud/provide/staking
Other files · agent-pods.md · agent_pod.py · provision.py · ai-machines.md · ows_cli.py
Security positives
显式移除 .env 自动加载，防止密钥被意外拾取
OWS_BIN 路径验证严格（绝对路径、存在性、可执行性、world-writable 检查）
无 npx 运行时下载，防止未固定包的供应链攻击
所有网络请求指向已知的合法域名
无凭证外泄代码，所有签名在本地完成
无混淆/编码执行，无 eval(atob(...)) 等恶意模式
代码结构清晰，文档与实现一致