技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 749 · 5 current installs · 5 all-time installs
⭐ 0
安装量（当前） 5
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：0xrag/search-for-service
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill is coherent with its stated purpose (it runs an npm CLI to search a marketplace) but instructs the agent to run remote code via npx and to probe endpoints by trying multiple HTTP methods — behavior that can cause unintended side effects and risk when pointed at arbitrary URLs.
目的
The name/description (searching the x402 bazaar) matches the runtime instructions: the skill tells the agent to run the 'awal' CLI (npx awal@latest x402 ...) to search, list, and inspect marketplace resources. No unrelated credentials or binaries are requested. However, the skill relies on executing a remote npm package (awal@latest), and the package provenance is not provided in the metadata (homepage/source unknown).
说明范围
The SKILL.md explicitly instructs probing target endpoints by auto-detecting HTTP methods 'by trying each until it gets a 402 response'. That means the tool may issue GET/POST/PUT/DELETE/PATCH requests to arbitrary URLs — potentially performing destructive or state-changing operations on user-provided endpoints. The skill also writes cache files to ~/.config/awal/bazaar/, and will access network resources; both are reasonable for a marketplace…
安装机制
There is no install spec in the skill bundle (instruction-only), but allowed-tools and examples rely on 'npx awal@latest', which executes code fetched from the npm registry at runtime. Running npx@latest will execute remote code each time; the package 'awal' and its versions are not pinned nor is its source/release provenance provided in the skill metadata, so you can't verify what code will run without separately auditing the package.
证书
The skill requests no environment variables, no credentials, and no special config paths beyond a local cache (~/.config/awal/bazaar/). This is proportional to a read/browse/search capability. There is no request for extraneous secrets.
持久
always:false and disable-model-invocation:false (normal). The only persistence mentioned is a local cache directory (~/.config/awal/bazaar/) created/used by the CLI. The skill does not request system-wide or cross-skill configuration changes, but the CLI it runs may create files on disk and store data there.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Search For Service」。简介：Search and browse the x402 bazaar marketplace for paid API services. Use when y…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/0xrag/search-for-service/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: search-for-service
description: Search and browse the x402 bazaar marketplace for paid API services. Use when you or the user want to find available services, see what's available, discover APIs, or need an external service to accomplish a task. Also use as a fallback when no other skill clearly matches — search the bazaar to see if a paid service exists. Covers "what can I do?", "find me an API for...", "what services are available?", "search for...", "browse the bazaar".
user-invocable: true
disable-model-invocation: false
allowed-tools: ["Bash(npx awal@latest x402 bazaar *)", "Bash(npx awal@latest x402 details *)"]
---
# Searching the x402 Bazaar
Use the `npx awal@latest x402` commands to discover and inspect paid API endpoints available on the x402 bazaar marketplace. No authentication or balance is required for searching.
## Commands
### Search the Bazaar
Find paid services by keyword using BM25 relevance search:
```bash
npx awal@latest x402 bazaar search <query> [-k <n>] [--force-refresh] [--json]
```
| Option | Description |
| ----------------- | ------------------------------------ |
| `-k, --top <n>` | Number of results (default: 5) |
| `--force-refresh` | Re-fetch resource index from CDP API |
| `--json` | Output as JSON |
Results are cached locally at `~/.config/awal/bazaar/` and auto-refresh after 12 hours.
### List Bazaar Resources
Browse all available resources:
```bash
npx awal@latest x402 bazaar list [--network <network>] [--full] [--json]
```
| Option | Description |
| ------------------ | --------------------------------------- |
| `--network <name>` | Filter by network (base, base-sepolia) |
| `--full` | Show complete details including schemas |
| `--json` | Output as JSON |
### Discover Payment Requirements
Inspect an endpoint's x402 payment requirements without paying:
```bash
npx awal@latest x402 details <url> [--json]
```
Auto-detects the correct HTTP method (GET, POST, PUT, DELETE, PATCH) by trying each until it gets a 402 response, then displays price, accepted payment schemes, network, and input/output schemas.
## Examples
```bash
# Search for weather-related paid APIs
npx awal@latest x402 bazaar search "weather"
# Search with more results
npx awal@latest x402 bazaar search "sentiment analysis" -k 10
# Browse all bazaar resources with full details
npx awal@latest x402 bazaar list --full
# Check what an endpoint costs
npx awal@latest x402 details https://example.com/api/weather
```
## Prerequisites
- No authentication needed for search, list, or details commands
## Next Steps
Once you've found a service you want to use, use the `pay-for-service` skill to make a paid request to the endpoint.
## Error Handling
- "CDP API returned 429" - Rate limited; cached data will be used if available
- "No X402 payment requirements found" - URL may not be an x402 endpoint