onchain-pay-open-api
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script (scripts/sign_and_call.sh) to perform RSA signing and API requests using standard utilities like openssl and curl.
- [SAFE]: Credentials and private keys are managed through a local .local.md file with explicit instructions for the AI to avoid leaking them in output.
- [SAFE]: All network requests are directed to api.commonservice.io, a Binance-owned domain, which is consistent with the skill's stated purpose.
Audit Metadata