agentsclimarketplace
Sign in

Apexscout verifiable commerce

Skill g8rr5dg2p7-svg/apexscout-agent-skills/skills/apexscout-verifiable-commerce

Use for x402 payment verification, an invalid PAYMENT-REQUIRED response, AgentCash Router merchants, Solana network selection, signed offers, exact terms hashes, Payment-Identifier retry behavior, duplicate-payment safety, and signed receipts; require explicit buyer approval before at most one paid API call.From its SKILL.md

Install
npx -y skills add g8rr5dg2p7-svg/apexscout-agent-skills --skill apexscout-verifiable-commerce

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its file declares

Copied from the file, not written here

The file declares its own license as Apache-2.0. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

2.7 KB, 489 tokens by cl100k_base, as published. Nobody here has run it

ApexScout Verifiable Commerce

Use this skill before an agent pays an x402 API, when PAYMENT-REQUIRED is invalid, or when a buyer needs offer, terms, duplicate-payment, or receipt verification.

Read references/buyer-policy.md and references/trust-chain.md before any paid action. Solana buyers must also read references/solana-x402-buyer.md; Crosshatch Effect buyers should read references/crosshatch-buyer.md; MPP buyers should read references/mpp-tempo-buyer.md; buyers inspecting @agentcash/router merchants should read references/agentcash-router-merchant.md.

Required Sequence

  1. Fetch https://apexscout.ai/.well-known/apexscout-commerce-trust.json.
  2. For Solana, verify the finalized Agent Registry asset and transaction in https://apexscout.ai/.well-known/apexscout-solana-agent-registry.json. Treat identity activation as neither demand nor revenue.
  3. Run the free Compatibility Witness preflight for the public HTTPS resource.
  4. Verify every payment choice, the signed offer, and the exact linked terms hash.
  5. Confirm route, method, amount, selected network, seller identity, and optional Payment-Identifier behavior. Base is the canonical default; Solana is usable only when ApexScout's public frontier manifest says production settlement is active.
  6. Return safe_to_consider, manual_review, stop, unsupported, or unreachable.
  7. Stop when no useful paid report exists.
  8. When one existing report is useful, show its exact price and enforce maximum one paid call.
  9. Ask for explicit approval of that exact route, amount, network, and one-call limit.
  10. Never pay without approval and never retry automatically.
  11. After a legitimate HTTP 200, verify the public signed receipt and return the report digest, generatedAt, and validUntil.

Use scripts/verify-offer.ts, scripts/verify-terms.ts, and scripts/verify-receipt.ts for local public-evidence checks. These scripts never pay.

Never request or expose private keys, seed phrases, OTPs, API secrets, wallet authorization signatures, payment payloads, confidential logs, or buyer identity. A public signed receipt is verification evidence, not a wallet authorization signature.

What ships with it: 9 files

19.6 KB alongside SKILL.md, 3 of them executable

references/

scripts/

Keep looking

Skills are one crate of 326,144. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.