Satoshi API — Bitcoin Intelligence

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward Bitcoin information skill that calls bitcoinsapi.com; users should know that any queried Bitcoin address is sent to that external service.

This skill appears safe for its stated purpose. Before installing, be comfortable with it contacting bitcoinsapi.com and with any Bitcoin addresses you query being visible to that external service.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you ask it to check an address, that address will be disclosed to bitcoinsapi.com, which may reveal your interest in that address.

Why it was flagged

The skill sends API requests, including user-supplied Bitcoin addresses, to the external provider bitcoinsapi.com.

Skill content
BASE = "https://bitcoinsapi.com/api/v1" ... data = get(f"/address/{address}")
Recommendation

Use it for public or non-sensitive address lookups, and avoid querying addresses you do not want associated with your usage of the external API.

What this means

Running the skill may install or use a third-party Python dependency needed for API requests.

Why it was flagged

The script relies on the httpx Python package when run through uv. This is expected for an HTTP API client, but the dependency is not pinned in the artifact.

Skill content
# dependencies = ["httpx"]
Recommendation

Install from trusted package sources and review or pin dependencies if you require stricter supply-chain control.