Internet Court Skill Claude skills

A router skill plus connectors and vendored crypto-protocol skills (x402, ERC-7710, escrow, GenLayer) for agents that pay and contract with other agents.

Our verdict Recommended with caveats

A large, carefully worded router for a very specific crypto stack; the real caution is that it points agents toward wallets and payments, and the vendored skills carry mixed licenses and key-handling examples.

What Internet Court Skill does

Internet Court is a consortium project aimed at agent-to-agent commerce on blockchains. The root SKILL.md (about 37 KB) is a router: when a task involves paying for an API with HTTP 402 / x402, delegating spending authority, escrow, agent identity, negotiation between agents or dispute resolution, it points the agent to the matching skill in the repository. It lays the stack out in six layers: identity and reputation, negotiation, contracts, payment and escrow, execution, and verification and disputes.

Two kinds of content sit under it. Three connector skills are written by the project: genlayer-erc7710-connector (how a GenLayer review decision turns into an ERC-7710 revocation), genlayer-intelligent-contracts (rubrics and evidence schemas for supervising an agent), and x402-erc7710 (combining paid-API payments with delegated permissions). The rest, over 90 skills, are vendored copies of other companies' official skills for wallets, payments, chains and data: Coinbase, MetaMask, OKX, NEAR, Starknet, Jupiter, Arkhai, ChainGPT, 0G and others. Those copies are mostly short reference files with no scripts of their own, and the vendored skills keep their upstream licenses. The root skill says never to ask for a private key, seed phrase or unrestricted bearer wallet. It is only useful if you are building on these specific protocols.

Good for

  • Developers building agents that pay for APIs with x402 or similar rails
  • Designing spending mandates and revocation for delegated agent wallets
  • Looking up official skills from several crypto protocols in one place

Not for

  • Anyone without blockchain and wallet experience
  • Unattended agents with real funds

What's inside depth 2/5

96 skill folders averaging about 12.6 KB, but most are vendored third-party documents, with no scripts, tests or evals of the project's own.

Skills
96
Reference docs
399
Scripts
76
Tests / evals
4
Templates
100
Avg SKILL.md
12.3 KB

Counted from the repository file tree. How we score depth.

Dependencies and costs

  • Crypto wallets and on-chain funds for any real use
  • Provider API keys, e.g. ChainGPT and Chainbase
  • Network access to the respective protocol services
  • GenLayer tooling for the connector skills

Security review

Broad access

This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.

  • Loads instructions from a server at run timeWhen only the master SKILL.md is present, the agent is told to fetch sibling skills from raw.githubusercontent.com/internet-court/internet-court-skill/main/<path> and follow them, so the instructions come from the main branch at runtime.SKILL.md:50
  • Pre-approves broad shell commandsVendored wallet skill pre-approves Bash(npm *), Bash(node *) and Bash(curl *) (plus a version-pinned npx awal), while the skill can send USDC/ETH/SOL and trade tokens.vendored/coinbase/agentic-wallet/SKILL.md:6
  • Pre-approves broad shell commandsVendored escrow skill pre-approves unrestricted Bash (with Read, Write, Edit); the GenLayer vendored skills (direct-tests, genlayer-cli, genvm-lint, integration-tests, write-contract) also pre-approve Bash.vendored/arkhai/fulfill-git-escrow/SKILL.md:5

An entry skill for agent-to-agent commerce that routes to many vendored third-party skills for wallets, payments (x402), escrow, GenLayer dispute resolution and AI inference markets. Some of those skills pre-approve unrestricted bash or curl/node/npm while handling wallets that can move real funds, and the master skill can fetch further instructions from GitHub at runtime. The router says to choose a trust level before committing funds and never to ask for private keys or seed phrases, but most of the vendored code and CLIs were not available to review.

Worth knowing

  • Installs with curl | shTells the user to install Foundry with curl -L https://foundry.paradigm.xyz | bash, a third-party vendor host.vendored/heurist/heurist-mesh-skill/references/x402-payment.md:8
  • Runs remote code at an unpinned versionRuns npx @bnb-chain/mcp@latest as an MCP server configured with a wallet PRIVATE_KEY; other vendored skills use npx -y create-solana-dapp@latest and unpinned pip/npm installs.vendored/bnb-chain/bnbchain-mcp/SKILL.md:16
  • Relies on a CLI or package we could not reviewVendored skills rely on many external CLIs and packages (awal, nla, genlayer, antseed, 0g-compute-cli, altllm portal CLIs, Foundry) whose code is not in the repository.vendored/coinbase/agentic-wallet/SKILL.md:6
  • Changes files outside your projectAntseed skill sets ANTHROPIC_BASE_URL / OPENAI_BASE_URL or writes ~/.codex/antseed.config.toml so coding-agent traffic goes through a local AntSeed proxy to third-party peers; other skills edit MCP client configs.vendored/antseed/antseed-connect/SKILL.md:380
  • Makes network requestsSkills call crypto and AI services such as Jupiter, Solana RPC, Coinbase x402, AltLLM, Heurist, 0G and ChainGPT, using provider API keys or wallet signatures.SKILL.md:153
  • Needs an API key for its own serviceSome vendored skills need their provider's credentials (for example OKX, ChainGPT, Chainbase API keys) which go to that provider's API.README.md:196

What we checked

The repository (754 files) on Oct 29, 2026. Not a full review: 595 of 754 files were not downloaded (large repository; we reviewed the skill folders); it relies on code outside the repository: about 595 of 754 repository files were not downloaded (many vendored skills and their references); external CLIs and packages invoked by the vendored skills (awal, nla, @bnb-chain/mcp, genlayer, antseed, 0g-compute-cli, Foundry); on-chain contracts, protocols and services these skills transact with.

NVIDIA SkillSpector static scan: 152 pattern hits (Data Exfiltration 51, Excessive Agency 27, Privilege Escalation 25, MCP Rug Pull 18, Tool Misuse 9, analysis-evasion 7). Most hits are documentation inside vendored third-party skills: .env and keychain mentions are wallet or API-key setup text, --network=host and sudo systemctl are an AntSeed deployment note, 'always comply' is a code-generation instruction in a GenLayer skill, and the analysis-evasion items are partial-analysis notes about vendored skill files. The code files are three plugin manifests with no scripts.

A review, not a certification. Skills change after we check them — read the files before installing.

License

MIT for the project's own files; vendored skills under vendored/ keep their upstream licenses (GitHub reports the repo license as unrecognized), so check each before reuse.

Can it run unattended?

Not really. These skills guide design and payments with money at stake; the root skill itself stresses mandates, caps and human approval rather than unattended operation.

Alternatives to Internet Court Skill

Trail of Bits Skills

trailofbits/skills

Trail of Bits' marketplace of 97 security skills: smart-contract scanners, C/C++ and Rust review, Semgrep and CodeQL workflows, variant analysis and audit helpers.

Recommended Broad access Depth 4/5

solana-dev

solana-foundation/solana-dev-skill

The Solana Foundation's skill for Solana development: Kit SDK, Anchor, testing, codegen, wallets and security, with 35 reference files.

Recommended Check first Depth 3/5

Stripe AI plugin

stripe/ai

Stripe's official agent plugin: ten skills for integration best practices, API upgrades, Connect, Apps, Metronome and Stripe CLI workflows.

With caveats Check first Depth 3/5

Paperclip

paperclipai/paperclip

A self-hosted app for orchestrating teams of AI agents with org charts, budgets and approvals; its skills are mostly maintainer workflows.

With caveats Broad access Depth 4/5

FAQ

What is the Internet Court skill?

It is an open skill from the Internet Court Consortium that routes agents to protocol skills for agent-to-agent commerce: x402 payments, ERC-7710 delegated permissions, escrow, agent identity and dispute resolution through GenLayer, Kleros and similar systems.

How do I install Internet Court?

The README says to clone the repository into your skills folder, for example .claude/skills/internet-court, so the root SKILL.md can read the vendored and integrations paths on disk. It also ships a Claude Code plugin manifest.

Is Internet Court safe to use with real money?

The skill's own rules say never to ask for private keys, seed phrases or unrestricted wallets, but it does steer agents into payment flows. Use test networks, small caps and human approval until you trust your setup.

Are the vendored skills covered by the MIT license?

No. The README states vendored copies keep their own upstream licenses. Check each vendor's license before reusing them.

Sources: GitHub repository (stars, license, file tree, last push Oct 26, 2026). Review based on the README and SKILL.md files as published.