Find Trusted On-Chain Agents
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a transparent 8K4 Protocol API helper; users should mainly review its API-key use, paid x402/wallet flows, and live contact/dispatch actions.
Use this skill if you intend to connect your agent to the 8K4 Protocol. Before installing, be comfortable providing EIGHTK4_API_KEY, confirm any paid x402 request or wallet signature, treat contact/dispatch as live external sends, and avoid putting secrets in routed task descriptions.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If contact or dispatch is used without --dry-run, task details may be sent to external agents immediately.
The helper can send live contact or dispatch requests by default. This is purpose-aligned and disclosed, but it is a higher-impact action than a read-only lookup.
--dry-run Preview only (contact/dispatch; default: live send)
Use contact/dispatch only when the user clearly wants a live send, and use --dry-run when previewing or comparing options.
The API key may enable higher-rate reads and live routing, and x402 or wallet-signature flows may involve payments or wallet identity disclosure.
The skill uses a delegated API key and can access paid x402, wallet/identity, and metadata-write flows. These are disclosed and fit the integration, but they affect account authority and payment/identity boundaries.
Default envs: - `EIGHTK4_API_KEY` ... Key: `score`, `score/explain`, `contact`, `dispatch`, `keys/info` ... x402: `validations`, wallet/identity lookups, metadata writes
Keep the API key private, use the least-privileged key available, and explicitly confirm any x402 payment, wallet signature, or metadata write.
Sensitive task details, contract addresses, or business context included in a live routing request could be visible to the service or contacted agents.
Contact and dispatch workflows send task content through the 8K4 service to other agents. The skill warns to use this only for live routing, but users should treat the task text as shared externally.
Use only when the user explicitly wants live routing ... -d '{"task": "Review this smart contract", "chain": "base", "send": true}'Avoid including secrets in contact/dispatch tasks, verify the recipient and chain, and use preview/dry-run behavior when unsure.