Qelt Contracts

Verify, inspect, and retrieve verified Solidity smart contracts, ABIs, and compiler/EVM versions on the QELT blockchain using the Mainnet Indexer API.

This skill looks coherent: it instructs the agent how to talk to the QELT Mainnet Indexer and does not request credentials or install code. Before using it, verify you trust the domain (https://mnindexer.qelt.ai), and never submit source code that contains private keys, secrets, or other sensitive data (the skill itself warns of this). Note the small metadata inconsistencies: SKILL.md expects curl on PATH and _meta.json contains placeholder ownerId — these suggest the package may be a community/templated submission, so if you need higher assurance, confirm the skill's publisher or use the API manually (curl) rather than delegating sensitive code to an automated agent.

Type: OpenClaw Skill Name: qelt-contracts Version: 0.1.0 The skill bundle provides a functional interface for smart contract verification on the QELT blockchain but is classified as suspicious due to potential shell injection vulnerabilities in the Bash command templates within SKILL.md. The instructions direct the AI agent to construct curl commands by directly interpolating user-provided variables (e.g., contract addresses and source code) into shell strings, which could be exploited for unauthorized command execution if inputs are not sanitized. Additionally, the _meta.json file contains an anomalous future timestamp (March 2026), and the skill relies on shell and network access (curl) which are high-risk capabilities.