Agent Economy ReportAgent Economy ReportCAUTION version 1.0.30 · audited 2026-09-09
This package is documentation-only: a SKILL.md instruction file, two READMEs, a skill card, and six reference files describing the AdMapix read-only API. It tells the agent to read an API key from the ADMAPIX_API_KEY environment variable, send it as an X-API-Key header, and call read endpoints on api.admapix.com with curl, returning the raw JSON. There is no executable script, no obfuscated content, no download-and-execute step, and no persistence. All network traffic goes to a single documented vendor domain, and the instructions repeatedly warn not to print, log, or echo the API key. The main things to be aware of are that it hands a vendor API key to shell curl commands, and that user query terms (keywords, app names) are sent to a third-party service.
| Declared purpose | A thin read-only client over the AdMapix API that fetches raw structured JSON about ad creatives, apps, rankings, download/revenue estimates, ad distribution, and market metadata, leaving analysis to the calling agent. |
| Observed behavior | Instructional markdown only. It checks whether ADMAPIX_API_KEY is set, shows a setup guide if not, then issues GET/POST curl requests to https://api.admapix.com/api/data/* with the key in the X-API-Key header, and returns the responses unmodified. No other hosts, no file modification, no code execution beyond curl. |
| Verdict, rules only | CAUTION · reads credential-like environment variables: ADMAPIX_API_KEY |
| Verdict, AI | SAFE |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| network | needed | curl GET/POST to https://api.admapix.com/api/data/{endpoint} (SKILL.md lines 20-23); reference files list only that same base URL. Vendor site links to www.admapix.com and github.com in README. |
| credentials | needed | Reads ADMAPIX_API_KEY and sends it as the X-API-Key header (SKILL.md line 18). Existence-only check avoids printing the value (line 33), and lines 15/60 forbid echoing or storing the key. |
| shell | needed | Bash snippets using curl for API calls and an env-var presence test; README also shows 'npx clawhub install admapix' and 'openclaw config set' as user-run setup commands. |
| filesystem_read | needed | Instructs the agent to read the bundled references/*.md files before calling an endpoint (SKILL.md line 64). No reads outside the package. |
| severity | finding |
|---|---|
| info | Vendor API key placed in a shell variable and HTTP header The skill reads the ADMAPIX_API_KEY secret from the environment and puts it into a curl header. This is the expected way to authenticate to the declared vendor API, and the key is only ever sent to api.admapix.com. Because the key travels through shell command lines, it could appear in shell history or process listings on the host. SKILL.md:18 admapix_auth_header="X-API-Key: ${ADMAPIX_API_KEY}" |
| info | Single documented network destination All API traffic goes to api.admapix.com, the vendor's own documented host. No secondary or undisclosed endpoints appear anywhere in the package. SKILL.md:20 curl -s "https://api.admapix.com/api/data/{endpoint}?{params}" -H "$admapix_auth_header" |
| info | Key presence checked without printing the value The setup check only reports 'ok' or 'missing', which avoids leaking the secret into the conversation or logs. Lines 15 and 60 also explicitly forbid echoing or storing the key. SKILL.md:33 [ -n "${ADMAPIX_API_KEY:-}" ] && echo ok || echo missing |
| low | User query terms are sent to a third-party service Anything the user asks about (keywords, app or company names) is transmitted to AdMapix along with the API key. This is inherent to the skill's purpose and is disclosed by the publisher, but it means queries should not contain confidential information. skill-card.md:20 Risk: API-authenticated requests send search terms, app identifiers, company identifiers, and related query data to AdMapix. |
| info | Install command is user-facing documentation, not automated code The README shows a manual install command for the human operator; the skill itself does not download or install any packages at runtime. README.md:22 npx clawhub install admapix |
| low | API responses contain third-party text that is passed through unmodified The skill instructs the agent to return API JSON verbatim, including app names and keyword-suggestion fields that originate from external advertising data. Such content should be treated as untrusted input by any downstream agent, since it is not sanitized beyond a note about HTML tags. references/api-creative.md:178 **HTML tags in names:** `appList[].name` may contain HTML highlight tags like `<font color='red'>keyword</font>`. Strip these before displaying to the user. |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| ...flag.png | not in the service index | references/api-creative.md:307 |
| ...icon.png | not in the service index | references/api-creative.md:310 |
| ...keyframe.jpg | not in the service index | references/api-creative.md:146 |
| ...logo.png | not in the service index | references/api-creative.md:129 |
| ...video.mp | not in the service index | references/api-creative.md:119 |
| api.admapix.com | not in the service index | README.md:76 |
| clawhub.ai | not in the service index | skill-card.md:7 |
| github.com | not in the service index | README.md:77 |
| www.admapix.com | not in the service index | README.md:27 |
| Binaries invoked | bash, curl, npx |
| Environment variables read | ADMAPIX_API_KEY |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 4 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
README.md | 81 | 1176868ec010cd80… |
README_CN.md | 81 | ceb3dc52205cc2ce… |
SKILL.md | 164 | 9ce5853320e0f538… |
_meta.json | 6 | 353c1bcd1b934b83… |
references/api-creative.md | 477 | 38a22e068715eb6d… |
references/api-distribution.md | 182 | 92b1e91922cae5fd… |
references/api-download-revenue.md | 187 | c72832090a05ce45… |
references/api-market.md | 178 | 178f1fe4ae1c36f4… |
references/api-product.md | 550 | d039edc5ef2a0615… |
references/api-ranking.md | 237 | 9c26111dbc000632… |
references/param-mappings.md | 127 | a9732b5b378ef374… |
skill-card.md | 51 | e5001e50835e4fcc… |
For agents
JSON: https://agenteconomy.report/k/admapix.audit.json · badge: https://agenteconomy.report/k/admapix.audited.svg ·
skill rating: /k/admapix · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).