NEAR Agent Skills

Comprehensive agentic skills for NEAR Protocol, including gas optimization and on-chain analytics.

This package appears to do what it says: call NEAR RPC and third-party NEAR analytics endpoints and provide gas/analytics helpers. Before installing: 1) be aware you must run 'npm install' and 'npm run build' manually (the registry entry lacks an automated install spec); run these in a sandbox if you want to be cautious. 2) The code calls rpc.mainnet.near.org and api.nearblocks.io — these are external services. Do not pass private keys or secrets into these functions. 3) If you rely on privacy or trust boundaries, review the source (already included) and consider pinning dependency versions or running a malware scan on node_modules. 4) If you want stronger guarantees, request a published homepage/repo or an author identity you can verify before using this in production.

Type: OpenClaw Skill Name: near-agent-skills Version: 1.0.0 The OpenClaw AgentSkills skill bundle is benign. All code and documentation are aligned with the stated purpose of providing NEAR Protocol analytics and gas optimization tools. Network requests are directed to legitimate NEAR RPC endpoints (`rpc.mainnet.near.org`) and public block explorer APIs (`api.nearblocks.io`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in SKILL.md or README.md. The direct interpolation of `account_id` into a URL in `src/gas-optimizer.ts` is a common pattern for API calls and, while a potential vulnerability if the API itself is flawed, does not indicate malicious intent from this skill bundle.