ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ChaosChain - Agent Trust & Reputation

v1.0.2

Verify AI agent identity and reputation via ERC-8004 on-chain registries

⭐ 0· 1.7k·2 current·2 all-time
by@sumeetchougule
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
Name/description (ERC-8004 identity & reputation) align with the code and deps: Python + web3/eth-account are appropriate. The skill also offers an optional on‑chain write (register) which is documented. Minor inconsistency: Registry metadata declares no required environment variables or credentials, but the SKILL.md/README/code document optional env vars (CHAOSCHAIN_PRIVATE_KEY, CHAOSCHAIN_ADDRESS, CHAOSCHAIN_RPC_URL) needed for some commands.
!
Instruction Scope
Runtime instructions and wrappers are narrowly scoped to read-only chain queries (verify, reputation, whoami) and an explicit register command for writes. However SKILL.md instructs users to put private keys directly into the OpenClaw config for register/whoami, which expands scope to sensitive credential handling. The skill uses many hardcoded public RPC endpoints for reads — expected for this use case but worth noting since traffic will go to those providers.
✓
Install Mechanism
No external arbitrary downloads; installation is a simple setup.sh that creates a Python venv and pip-installs web3 and eth-account from PyPI (requirements.txt). This is proportionate to the skill's purpose and is lower risk than remote binary downloads.
!
Credentials
The only sensitive credential required is CHAOSCHAIN_PRIVATE_KEY (optional, only for register). That is proportionate to performing an on-chain register, but the skill's documentation encourages storing the private key in OpenClaw config (plain JSON), which is high-risk. Also the public metadata does not list these optional env vars, creating an informational mismatch that could cause users to inadvertently grant secrets without noticing.
ℹ
Persistence & Privilege
The skill does not request always:true and does not create background processes. Model invocation is allowed (default), which is expected, but if you supply a private key and allow autonomous invocation the agent could invoke /chaoschain register autonomously — the README says registration defaults to Sepolia and requires explicit command, but autonomous invocation combined with provided credentials increases blast radius.
What to consider before installing
This skill appears to do what it claims (read ERC-8004 registries) and installs only Python dependencies, but take these precautions before installing or supplying secrets: - You do not need to provide any env vars to use read-only commands (verify, reputation). Do not set CHAOSCHAIN_PRIVATE_KEY unless you intend to perform the explicit /chaoschain register action. - Do NOT store a mainnet private key in openclaw.json or plaintext config. If you must register, prefer using a dedicated testnet or ephemeral wallet and never reuse a key that controls valuable funds. - Review the full scripts/chaoschain_skill.py before trusting the skill with credentials to confirm the private key is used only for signing register txns and not exfiltrated. Consider running the skill in an isolated environment or sandbox until audited. - If you want to avoid third-party RPC providers, set CHAOSCHAIN_RPC_URL to a provider you control or a trusted RPC to avoid sending queries to the hardcoded public endpoints. - Ask the maintainer to update registry metadata to list optional env vars (CHAOSCHAIN_PRIVATE_KEY, CHAOSCHAIN_ADDRESS, CHAOSCHAIN_RPC_URL) so users see the requirement upfront. If you are comfortable keeping private keys offline or using a throwaway testnet key, the read-only parts are reasonable to use; otherwise treat this skill as requiring manual code review and careful secret handling.

Like a lobster shell, security has layers — review code before you run it.

erc-8004vk971wcgzrve9nqs0kt57rrmwv9810vmaethereumvk971wcgzrve9nqs0kt57rrmwv9810vmaidentityvk971wcgzrve9nqs0kt57rrmwv9810vmalatestvk971wcgzrve9nqs0kt57rrmwv9810vmareputationvk971wcgzrve9nqs0kt57rrmwv9810vmatrustvk971wcgzrve9nqs0kt57rrmwv9810vma

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⛓️ Clawdis
Binspython3

Comments