Bifrost Slpx Info
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may rely on contract addresses or API endpoints without an obvious provenance trail in the registry.
The skill is instruction-only, but the registry does not provide a source or homepage to independently verify the claimed protocol affiliation, API endpoint, or contract-address guidance.
Source: unknown Homepage: none
Verify the contract address and API endpoint against Bifrost's official documentation before relying on the results for financial decisions.
External RPC providers may observe queried wallet addresses and timing of requests.
The skill discloses use of external RPC providers and address-based balance or withdrawal lookups. This is purpose-aligned, but wallet addresses queried through third-party RPCs can reveal which addresses the user is interested in.
Default RPC | `https://ethereum.publicnode.com` ... `https://base.publicnode.com` ... `https://optimism.publicnode.com` ... `https://arbitrum-one.publicnode.com`; User Balance & Withdrawal Queries ... `balanceOf(address)` ... `getWithdrawals(address)`
Use a trusted RPC endpoint, especially for sensitive wallet-address lookups, and avoid querying addresses you do not want associated with your activity.