Bifrost Slpx Info
PassAudited by ClawScan on May 1, 2026.
Overview
The provided artifacts describe a read-only Bifrost data lookup skill with disclosed public RPC/API use and no code or credentials, but users should verify the source and understand wallet-address queries go to external providers.
This appears safe for read-only Bifrost protocol lookups. Before installing, verify the Bifrost contract address and API endpoint from official sources, and use a trusted RPC provider if wallet-address privacy matters to you.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may rely on contract addresses or API endpoints without an obvious provenance trail in the registry.
The skill is instruction-only, but the registry does not provide a source or homepage to independently verify the claimed protocol affiliation, API endpoint, or contract-address guidance.
Source: unknown Homepage: none
Verify the contract address and API endpoint against Bifrost's official documentation before relying on the results for financial decisions.
External RPC providers may observe queried wallet addresses and timing of requests.
The skill discloses use of external RPC providers and address-based balance or withdrawal lookups. This is purpose-aligned, but wallet addresses queried through third-party RPCs can reveal which addresses the user is interested in.
Default RPC | `https://ethereum.publicnode.com` ... `https://base.publicnode.com` ... `https://optimism.publicnode.com` ... `https://arbitrum-one.publicnode.com`; User Balance & Withdrawal Queries ... `balanceOf(address)` ... `getWithdrawals(address)`
Use a trusted RPC endpoint, especially for sensitive wallet-address lookups, and avoid querying addresses you do not want associated with your activity.