ETHSkills
PassAudited by ClawScan on May 1, 2026.
Overview
ETHSkills is a coherent documentation-fetching skill for Ethereum development, with the main caveats that it relies on live remote docs and includes a user-directed npm scaffolding command.
This skill appears safe to install as an Ethereum documentation helper. Before letting an agent act on its guidance, review any fetched remote docs and approve any commands such as npm scaffolding or deployment steps, especially for real contracts, mainnet, wallets, or funds.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may rely on remote ethskills.com pages as current guidance when building or deploying Ethereum projects.
The skill is designed to load live remote documentation into the agent’s working context. This is central to the stated purpose, but the fetched content can change after review and may influence the agent’s later development recommendations.
Just fetch a URL and read it.
Treat fetched docs as external reference material: review important instructions before acting on them, especially before deploying contracts or handling funds.
If followed, this command can create files and run package code in the user’s development environment.
The example workflow includes a user-directed command that can download and execute the latest npm scaffolding package. This is purpose-aligned for Ethereum dApp setup, but it is still executable third-party code.
Run: npx create-eth@latest
Ask for approval before running scaffolding commands, and consider pinning or reviewing package versions for production or sensitive environments.