Xena Protocol

Xena Protocol — scan your Gmail for phishing, crypto scams, impersonation, and BEC. Optionally submit hashed reports to an on-chain registry on Ethereum Sepo...

What to consider before installing: - Functionality & dependencies: This skill does what it claims — it uses the gog CLI to read Gmail, runs a local Python detection pipeline, and (optionally) can submit hashed reports to a hardcoded OpenClawRegistry on Sepolia. It needs python3, gog, and an ANTHROPIC_API_KEY for the LLM stage; Reporter mode also needs an Ethereum RPC URL (SEPOLIA_RPC) which the code expects even though the skill metadata doesn't list it. - Sensitive data & persistence: If you opt into Reporter mode the skill will generate an Ethereum wallet and write wallet_address + wallet_private_key into ~/.openclaw/phishing-detection/config.json in plaintext. The README and SKILL.md say 'do not print the private key', but the private key is still stored unencrypted on disk. If you care about key security, do not enable Reporter mode or modify the code to store keys in an encrypted vault or use an external signer. - Network & trust: The brew formula for gogcli comes from a third‑party tap (steipete/tap); verify the tap/source before installing. The skill uses the Anthropic API (so your key will be used for LLM calls) and will call the Ethereum RPC you provide — use a reputable provider and avoid exposing high-value mainnet keys. - Audit & containment: Review the included Python code (especially registry_client.py and setup.py) yourself or run the skill in a sandboxed account first. If you want only local detection, choose Watcher mode (no wallet generated, no on‑chain writes). If you plan to use Reporter mode, consider: (a) using a throwaway testnet account, (b) replacing local key storage with a secure vault, or (c) using an external signer/hardware wallet. - Missing declaration: Ask the publisher to add SEPOLIA_RPC to the declared required env vars and to document key storage/rotation practices. If you are not comfortable with an unencrypted private key stored locally, treat this as a blocking issue. Overall: the skill is coherent with its purpose but has some security/operational choices (plaintext local private key, undeclared RPC env var, third‑party brew tap) that justify caution before enabling Reporter mode or installing on a sensitive machine.

Type: OpenClaw Skill Name: xena-protocol Version: 0.2.0 Xena Protocol is a phishing detection skill that analyzes Gmail inboxes using a multi-stage pipeline involving heuristics, Naive Bayes classification, and LLM analysis. It features an opt-in 'Reporter' mode that submits hashed threat metadata to an Ethereum Sepolia registry. The skill includes explicit defensive instructions in SKILL.md to prevent prompt injection from malicious emails and strictly limits the agent's transaction capabilities to a specific contract. While it manages a local wallet and private key (stored in ~/.openclaw/phishing-detection/config.json), the implementation is transparent, well-tested, and aligned with its stated security purpose.