by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, network calls, caching, and optional API-key usage are coherent with its stated purpose (multi-chain blockchain analytics); nothing appears disproportionate or secretly exfiltrating data.
评估建议
This skill appears to do exactly what it claims: query public blockchain APIs and cache responses locally. Things to consider before installing: (1) cached responses (addresses, tx hashes) are stored under ~/.openclaw/cache/crypto-analytics and persist for ~5 minutes — delete the folder if you want to remove local traces; (2) providing ETHERSCAN_API_KEY or BLOCKCHAIR_API_KEY increases rate limits but gives the skill access to those API keys — only set keys you trust; (3) minor inconsistencies ex...详细分析 ▾
✓ 用途与能力
Name/description (multi-chain analytics) align with the included code and documentation. The optional ETHERSCAN_API_KEY / BLOCKCHAIR_API_KEY referenced in docs are appropriate for the functionality. No unrelated credentials or binaries are requested.
✓ 指令范围
Runtime instructions and the Python code call only public blockchain APIs (Etherscan V2, Blockchair, public Solana RPCs), perform local TTL caching, and provide address validation/formatting. The skill does not read or transmit unrelated system files, nor does it attempt to contact unknown endpoints.
✓ 安装机制
There is no external install step; the skill is shipped as Python scripts and docs (no remote downloads or extract steps). This minimizes installation risk. The skill will write cache files locally, which is expected behavior.
✓ 凭证需求
No required environment variables are declared; the skill optionally loads ETHERSCAN_API_KEY and BLOCKCHAIR_API_KEY from a .env (or system env). Those optional keys are appropriate for the services used. No other secrets are requested.
✓ 持久化与权限
always:false (not force-included). The skill writes short-lived cache files under ~/.openclaw/cache/crypto-analytics/api_responses/ (declared in SKILL.md). It does not modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/4/2
v1.0.3 brings improved privacy documentation and environment variable loading. - Clarified Privacy section: Now accurately describes that local caching may store queried addresses and transaction hashes. - Improved .env handling: Environment variables are now only read from the OpenClaw workspace root, not user-wide. - No functional changes to blockchain analytics features.
● 无害
安装命令
点击复制官方npx clawhub@latest install crypto-analytics
镜像加速npx clawhub@latest install crypto-analytics --registry https://cn.longxiaskill.com