Skills verify-task-funding

📦

verify-task-funding

Name: verify-task-funding
Author: geiccobs

Content revision r1 High Risk 📁 Filesystem access⚙️ External commands🌐 Network access

Verify Task Funding Before You Commit

Online work offers often hide weak funding, closed access, or costly payout conditions. This skill reviews primary evidence and estimates conservative expected value before you commit.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "verify-task-funding" from https://skillstore.io/skills/geiccobs-verify-task-funding.md and its manifest at https://skillstore.io/api/skills/geiccobs-verify-task-funding/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/geiccobs-verify-task-funding.md Signed manifest GET /api/skills/geiccobs-verify-task-funding/manifest Signed lockfile GET /api/skills/geiccobs-verify-task-funding/lockfile

Test it

Using "verify-task-funding". Review a bounty advertising 2,000 USDC with no visible escrow and discretionary acceptance.

Expected outcome:

Classification: CONDITIONAL. The advertised payout is not task-funded, and payment depends on acceptance. Verify sponsor history before committing substantial work.

Using "verify-task-funding". Assess a hackathon page whose submission deadline passed yesterday.

Expected outcome:

Classification: CLOSED_OR_INELIGIBLE. The submission window is closed, so the prize should not be treated as an available opportunity.

Using "verify-task-funding". Evaluate a platform balance marked available, with documented withdrawal fees and supported geography.

Expected outcome:

Classification: WITHDRAWABLE. The balance appears available under documented terms, but it is not realized revenue until receipt is confirmed.

Security Audit

High Risk

v1 • 7/28/2026 Open versioned report

Most static alerts are false positives caused by Markdown links, inline code formatting, and explicit warnings against exposing credentials. Two external links create low network and payment-flow risk. The unsupported safety-review claim and publisher-controlled paid-service promotion require marketplace disclosure and remediation.

Files scanned

161

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

README.md:19-20

Prompt Injection Attempt Detected

The phrase "safety-reviewed" asserts unverified external authority and may bias agents or users against independent security review.

The exact trust claim appears in the README without audit scope, date, or evidence. It is less explicit than an instruction to bypass review.

Medium

SKILL.md:89-100 README.md:47-59

Publisher-Controlled Paid Service Promotion

The workflow promotes the publisher's paid API and marketplace service, creating a conflict of interest and potential USDC payment exposure.

Both files explicitly advertise publisher-associated paid checks, and SKILL.md states a 0.05 USDC charge.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

SKILL.md:92

Hardcoded URL

[x402 v2 task-brief API](https://verify-task-funding.zn5xpfff6b.chatgpt.site/api/task-brief-readines

The line directs agents to a publisher-controlled external API that charges USDC. Contacting it creates third-party network, data-disclosure, and payment risk.

Low

SKILL.md:98

Hardcoded URL

[instant task-brief readiness check](https://the402.ai/catalog/service?id=svc_73b4bf1a0e9b4e8f).

The line links to a publisher-offered paid marketplace service. Following it creates external network exposure and can lead users into a payment flow.

Risk Factors

📁 Filesystem access (1)

README.md:43

⚙️ External commands (21)

🌐 Network access (2)

SKILL.md:92 SKILL.md:98

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/geiccobs-verify-task-funding/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/geiccobs-verify-task-funding/security.svg)](https://skillstore.io/skills/geiccobs-verify-task-funding?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/geiccobs-verify-task-funding?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/geiccobs-verify-task-funding/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/geiccobs-verify-task-funding.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

geiccobs. (2026). verify-task-funding security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/geiccobs-verify-task-funding/audits/1

BibTeX citation

@techreport{geiccobs-geiccobs-verify-task-funding-2026,
  author = {geiccobs},
  title = {verify-task-funding security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/geiccobs-verify-task-funding/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "verify-task-funding security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "geiccobs"
date-released: "2026-07-28"
url: "https://skillstore.io/skills/geiccobs-verify-task-funding/audits/1"
identifiers:
  - type: other
    value: "skillstore:geiccobs-verify-task-funding:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Screen a Freelance Offer

Review payout terms, eligibility, fees, and payment history before investing unpaid labor.

Assess a Crypto Bounty

Verify escrow, wallet network, withdrawal conditions, and required spending before accepting a bounty.

Compare Prize Opportunities

Compare funding strength and expected net value across hackathons or marketplace tasks.

Try These Prompts

Check One Task

Review this task URL: [URL]. Confirm whether it is open, eligible, and credibly funded. List evidence, red flags, and your recommendation.

Verify Payout Evidence

Evaluate the payout claim for [task]. Separate advertised value, escrow, withdrawable funds, and received revenue. Cite primary evidence and state uncertainties.

Estimate Expected Value

Analyze [task URL] using payout, payment probability, fees, required spending, labor hours, and hourly value. Show assumptions and estimate expected net value.

Compare Multiple Opportunities

Compare these opportunities: [URLs]. Verify status, eligibility, funding, payment conditions, competition, costs, and expected net value. Rank them by evidence quality.

Best Practices

Provide the canonical task URL, exact payout claim, deadline, and relevant eligibility details.
Prefer task-specific escrow, explorer records, platform releases, and official terms over marketing claims.
Keep facts, assumptions, unknowns, and estimates clearly separated.

Avoid

Do not treat total prize pools or sponsor reputation as task-specific funding.
Do not count pending, conditional, promotional, or withdrawable balances as received revenue.
Do not share credentials, private keys, seed phrases, or authentication tokens.

Frequently Asked Questions

Can this skill guarantee payment?

No. It assesses available evidence and payment conditions, but counterparties and platforms can still fail.

What evidence is strongest?

Confirmed receipt is strongest, followed by withdrawable balances, task-specific escrow, and official funded award records.

Does an advertised prize prove funding?

No. Marketing copy, total prize pools, and sponsor reputation do not prove that a specific task is funded.

Can it evaluate crypto bounties?

Yes. It can review on-chain funding, escrow, wallet networks, withdrawal terms, fees, and payment history.

Does the skill require a paid service?

No. The core workflow is free. Any external paid check requires separate review and explicit user approval.

What information should I provide?

Provide the task URL, payout claim, deadline, location, account constraints, estimated effort, and any available funding evidence.

Developer Details

Author

geiccobs

License

MIT-0

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/geiccobs/geiccobs/tree/b8f0af7e56582c600e3c320936c1dbcb787f34ab/skills/verify-task-funding

Ref

8c0ec6c8c516012294050d2edafe66c34bcbec89

Maintenance freshness

7/28/2026

Usage

0 downloads · 0 views

File structure

📄 README.md

📄 SKILL.md