Agent

SlowMist Agent Security

xlayer|id 2155|owner 0x35d835f2319cddd63719124293ef7951f27d51a8

Checks 1–7

该技能提供了一个适用于 OpenClaw、Hermes 代理及其他基于 LLM 代理系统的结构化安全审查框架，涵盖：Skill/MCP 安装（安装前检测恶意模式），GitHub 仓库评审（对安全问题的代码库进行审计），URL/文档分析（扫描提示注入和社会工程），链上地址审查（反洗钱风险评估与交易分析），产品/服务评估（架构与权限分析），社交分享评测（验证聊天中推荐的工具）

Keyerrorthe check could not completefaildid not passpasspassedrefusedskippeda check this one depends on did not passunclaimedthe document made no claim to checkunprobeableno declared endpoint that a probe can reachnot checkedthis check was never askedFull definitions

The seven checks, with their evidence

7 recorded

Every field the checker recorded, rendered in full rather than summarised, with the timestamp it was recorded at.

Registered?rung 1 · registered
pass
The agent exists in the on-chain registry, with an owner and a document URL.
passed
block_number
67576783
chain_id
196
owner
0x35d835f2319cddd63719124293ef7951f27d51a8
registry
0x8004a169fb4a3325136eb29fa0ceb6d2e539a432
token_id
2155
tx_hash
0x01c8a797ba4c484066a440d0982e947cef2fab5db7222965e4d1fab1044a143d
checked at 2026-08-10T07:25:48.728320Z
Reachable?rung 2 · resolvable
pass
The document URL it declared actually answers when fetched.
passed
elapsed_ms
2815
final_url
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/b2de97b6-2973-4484-a3bf-d4dfb87f68dd.json
http_status
200
request_url
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/b2de97b6-2973-4484-a3bf-d4dfb87f68dd.json
scheme
https
uri
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/b2de97b6-2973-4484-a3bf-d4dfb87f68dd.json
checked at 2026-08-10T07:25:48.728320Z
Readable?rung 3 · parseable
pass
What came back is valid JSON that a machine can read.
passed
body_bytes
3067
body_sha256
c662939179e858993884f91535df7c3faed5eb72fc82508576fc59fb4f5cdc55
content_type
application/json
checked at 2026-08-10T07:25:48.728320Z
Follows the spec?rung 4 · conformant
pass
The document meets what ERC-8004 requires of it.
passed
both_fields_present
false
legacy_endpoints_field
false
may_gaps
x402Support, active, supportedTrust
must_violations
(empty)
registrations_checked
0
services_field_source
services
services_status
present
should_gaps
services[].version, registrations
spec_commit
68fc6765761a10fb26f0692df21c8a6f9d12b1be
checked at 2026-08-10T07:25:48.728320Z
Claims its identity?rung 5 · bound
unclaimed
The document names the on-chain agent it belongs to, rather than leaving it unsaid.
unclaimed — the document made no claim to check
declared_agent_id
—
declared_chain
—
declared_registry
—
match
—
reason
unclaimed
registrations_seen
0
checked at 2026-08-10T07:25:48.728320Z
Answers?rung 6 · live
pass
A declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.
passed
endpoints
{"declared":"https://okxai.slowmist.ai/v1/review/skill","elapsed_ms":2774,"final_url":"https://okxai.slowmist.ai/v1/revi… (1,804 chars — expand)
{"declared":"https://okxai.slowmist.ai/v1/review/skill","elapsed_ms":2774,"final_url":"https://okxai.slowmist.ai/v1/review/skill","http_status":402,"index":0,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okxai.slowmist.ai/v1/review/skill"}, {"declared":"https://okxai.slowmist.ai/v1/review/repository","elapsed_ms":2112,"final_url":"https://okxai.slowmist.ai/v1/review/repository","http_status":402,"index":1,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okxai.slowmist.ai/v1/review/repository"}, {"declared":"https://okxai.slowmist.ai/v1/review/url","elapsed_ms":2230,"final_url":"https://okxai.slowmist.ai/v1/review/url","http_status":402,"index":2,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okxai.slowmist.ai/v1/review/url"}, {"declared":"https://okxai.slowmist.ai/v1/review/onchain","elapsed_ms":2242,"final_url":"https://okxai.slowmist.ai/v1/review/onchain","http_status":402,"index":3,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okxai.slowmist.ai/v1/review/onchain"}, {"declared":"https://okxai.slowmist.ai/v1/review/product","elapsed_ms":2158,"final_url":"https://okxai.slowmist.ai/v1/review/product","http_status":402,"index":4,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okxai.slowmist.ai/v1/review/product"}, {"declared":"https://okxai.slowmist.ai/v1/review/social","elapsed_ms":2116,"final_url":"https://okxai.slowmist.ai/v1/review/social","http_status":402,"index":5,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okxai.slowmist.ai/v1/review/social"}
endpoints_answered_not_live
0
endpoints_declared
6
endpoints_live
6
endpoints_our_error
0
endpoints_payment_gated
6
endpoints_probeable
6
endpoints_probed
6
endpoints_refused
0
checked at 2026-08-10T08:28:46.157805Z
Has feedback?rung 7 · attested
fail
At least one on-chain feedback entry names this agent.
did not pass
distinct_authors
0
feedback_count
0
reason
no_feedback
checked at 2026-08-10T07:25:48.728320Z

Check it again, now

outside the census

Everything above is one sweep, pinned to one block. This asks the same checker to run the same ladder against this agent right now — one request to its declared document, at the current head. The answer belongs to no run, is stored nowhere, and never enters a published rate or finding.

On-chain snapshot

xlayer

token id: 2155
owner: 0x35d835f2319cddd63719124293ef7951f27d51a8
block: 67,576,783
observed: 2026-08-10T07:25:48.731942Z

tokenURIopen →

https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/b2de97b6-2973-4484-a3bf-d4dfb87f68dd.json

What the fetch saw

https

scheme: https
request url: https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/b2de97b6-2973-4484-a3bf-d4dfb87f68dd.json
final url: https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/b2de97b6-2973-4484-a3bf-d4dfb87f68dd.json
http status: 200
content type: application/json
size: 3,067 bytes
sha256: c662939179e858993884f91535df7c3faed5eb72fc82508576fc59fb4f5cdc55
elapsed: 2,815 ms

This run

reproducible

Every status above is scoped to this sweep, at this block. Rerun it and you should get these answers back.

run: ab6e134c-8018-4814-80bb-c83fb79f3710
chain: xlayer
pinned block: 67,576,783
agents: 10,723
started: 2026-08-10T07:10:20.176367Z
finished: 2026-08-10T08:11:41.005767Z
checker: 0.7.0 · 55deaa9ce71c025a9199311a53cdc2de236eae53
spec commit: 68fc6765761a10fb26f0692df21c8a6f9d12b1be

Reproduce

cargo run -p sweeper -- xlayer   # at block 67576783

What each check measures →

The seven checks, with their evidence

Registered?rung 1 · registered

Reachable?rung 2 · resolvable

Readable?rung 3 · parseable

Follows the spec?rung 4 · conformant

Claims its identity?rung 5 · bound

Answers?rung 6 · live

Has feedback?rung 7 · attested

Check it again, now

On-chain snapshot

What the fetch saw

This run