This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @beocca/x402-cli
clawhub inspect @beocca/x402-cli --version 1.2.4
Security evidence
SkillVetAI static result: no findings detected
This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
Status
completed
Coverage
full text content
Files
6 / 6 inspected as text
Checked
8/27/2026, 10:18:59 PM
Scanner
0.1.3
Policy
1.0.3
4 inferred permission indicators
network access — automatically inferred
filesystem write — automatically inferred
credential access — automatically inferred
external write action — automatically inferred
49 dependency and API indicators
pypi: aiohappyeyeballs ==2.7.1
pypi: aiohttp ==3.14.3
pypi: aiosignal ==1.4.0
pypi: annotated-types ==0.7.0
pypi: attrs ==26.1.0
pypi: bitarray ==3.8.2
pypi: certifi ==2026.6.17
pypi: charset-normalizer ==3.4.9
pypi: ckzg ==2.1.7
pypi: cytoolz ==1.1.0
pypi: eth-account ==0.13.7
pypi: eth-hash ==0.8.0
pypi: eth-keyfile ==0.8.1
pypi: eth-keys ==0.7.0
pypi: eth-rlp ==2.2.0
pypi: eth-typing ==6.0.0
pypi: eth-utils ==6.0.0
pypi: eth_abi ==6.0.0b1
pypi: frozenlist ==1.8.0
pypi: hexbytes ==1.3.1
pypi: idna ==3.18
pypi: multidict ==6.7.1
pypi: nest-asyncio ==1.6.0
pypi: parsimonious ==0.10.0
pypi: propcache ==0.5.2
pypi: pycryptodome ==3.23.0
pypi: pydantic ==2.13.4
pypi: pydantic_core ==2.46.4
pypi: python-dotenv ==1.2.2
pypi: pyunormalize ==17.0.0
pypi: regex ==2026.6.28
pypi: requests ==2.34.2
pypi: rlp ==4.1.0
pypi: toolz ==1.1.0
pypi: types-requests ==2.33.0.20260712
pypi: typing-inspection ==0.4.2
pypi: typing_extensions ==4.16.0
pypi: urllib3 ==2.7.0
pypi: web3 ==7.16.0
pypi: websockets ==15.0.1
External clawhub result: suspicious
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
Evidence checked
8/27/2026, 6:19:09 PM
Release binding
Matches this record
skillspector: suspicious
llm: suspicious
Recorded files
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.