ClawHub

Element Nft Tracker

v1.1.0

Element Market API integration. This skill strictly requires the 'ELEMENT_API_KEY' environment variable to function.

⭐ 1· 318·0 current·0 all-time
by@beelzebub520
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, SKILL.md, and runtime commands all target Element Market API endpoints and require an ELEMENT_API_KEY plus curl/jq. These requirements are appropriate and proportional for an API-integration skill.
✓
Instruction Scope
The instructions are explicit: they run curl against api.element.market and parse JSON with jq. Wallet- and offer-related queries are conditional and the SKILL.md includes explicit 'MUST ask for user permission' rules and privacy guidance (print images as plain URLs). The instructions do not reference unrelated files, system paths, or other credentials.
✓
Install Mechanism
No install spec or downloads — instruction-only skill. This minimizes supply-chain risk; it expects existing curl and jq on PATH.
ℹ
Credentials
SKILL.md declares ELEMENT_API_KEY as the sole credential and primary credential, which is appropriate. However, the top-level 'Requirements' block in the provided registry summary (showing 'Required env vars: none' and 'Primary credential: none') contradicts SKILL.md. This appears to be a metadata inconsistency in the package listing and should be resolved before deployment. Otherwise the single API key request is proportional.
✓
Persistence & Privilege
always:false and user-invocable:true (defaults) — the skill does not request permanent or elevated platform presence. There is no install that modifies other skills or system configuration.
Assessment
This skill appears to do what it says: it issues read-only queries to api.element.market and requires an ELEMENT_API_KEY and curl/jq. Before installing: (1) verify the ELEMENT_API_KEY is a read-only/scoped key from Element Market (avoid using any broad or long-lived secrets); (2) confirm the homepage/source repository (https://github.com/beelzebub520/element-nft-tracker) and review it if possible; (3) fix the metadata inconsistency (the registry summary omitted the required env var) so you know the installer/runtime will prompt for the key; (4) only allow wallet-address queries when you explicitly consent (the skill's SKILL.md enforces this, but confirm the agent adheres to it). If you cannot inspect the repo or prefer extra caution, create a limited-scope API key and monitor network calls originating from the agent.

Like a lobster shell, security has layers — review code before you run it.

latestvk975k5vyhkfn184ht43h96am6h833m4k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌊 Clawdis
Binscurl, jq

Comments