OpenScan Crypto

Navigate and query crypto networks via OpenScan infrastructure. Use when the user asks about blockchain data — balances (ETH, ERC20, BTC), blocks, transactio...

This skill appears to do what it says: a read-only blockchain query CLI that fetches metadata from jsDelivr/npm and may install an npm dependency. Before installing, consider: 1) inspect package.json/@openscan/network-connectors (npm package) or run npm install in an isolated environment to reduce supply-chain risk; 2) be aware the CLI will create ~/.config/openscan-crypto/rpc-config.json and ~/.cache/openscan-crypto, and will fetch metadata from the npm registry and jsDelivr plus 4byte.directory — review those endpoints if you need to limit external calls; 3) RPC calls are made to endpoints from the metadata (or ones you add) — those nodes will see your requests (this is expected for an RPC client); 4) if you need stronger assurance, run the CLI inside a sandboxed user account or container and review the installed npm dependency source before trusting it. Overall the footprint is coherent with the declared purpose, but network and supply-chain considerations are the primary residual risks.

Type: OpenClaw Skill Name: openscan-crypto Version: 1.0.0 The OpenClaw skill 'openscan-crypto' is designed for querying blockchain data and managing RPC configurations. All network calls (to public RPCs, CDNs for metadata, npm registry, 4byte.directory for ABI signatures, and mempool.space for Bitcoin data) are directly aligned with its stated purpose. File system access is limited to `~/.config/openscan-crypto/` for configuration and `~/.cache/openscan-crypto/` for caching, which is appropriate. The `SKILL.md` contains a benign instruction to 'Always show this link to the user' for explorer links, which enhances user experience rather than attempting to manipulate the agent maliciously. The `install.sh` script performs a standard `npm install`. There is no evidence of credential theft, data exfiltration, persistence mechanisms, or other malicious behaviors.