MetaComp VisionX KYT

Check Web3 wallet or transaction security using MetaComp VisionX. Trigger when user mentions wallet address (0x..., Bitcoin, Tron), transaction hash, or asks...

This skill appears to do what it claims: it will call MetaComp's KYT service and needs your METACOMP_TOKEN. Before installing: (1) confirm you trust metacomp.ai and the published npm package; review the package source (GitHub repo) and npm page; (2) treat METACOMP_TOKEN like any API key — use a least-privilege key and rotate/revoke if needed; (3) expect that wallet addresses and transaction hashes you provide will be sent to MetaComp for analysis (do not provide private keys or other secrets); (4) the skill will prompt you to confirm whether you are the sender or recipient and will pause until you answer — this prevents accidental analysis, but be cautious about sharing counterparty addresses you don’t control; (5) if you need stricter isolation, run the CLI in a sandboxed environment or review traffic to ensure it only talks to MetaComp endpoints.

Type: OpenClaw Skill Name: metacomp-visionx-kyt Version: 1.0.1 The skill bundle is a legitimate integration for MetaComp VisionX, a Web3 security and KYT (Know Your Transaction) service. The SKILL.md file contains detailed instructions for the AI agent to format security reports, perform multi-vendor cross-verification, and handle user interactions for wallet and transaction analysis. While the instructions are highly prescriptive and include specific logic gates (e.g., requiring user input before proceeding), they are entirely aligned with the stated purpose of providing structured security audits. The installation process uses a standard MCP server pattern via npm (@metacomp/visionx-kyt-mcp), and no indicators of data exfiltration, unauthorized execution, or malicious prompt injection were found.