Subscan API Skill

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 14, 2026, 2:24 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, runtime instructions, and required access are consistent with a Subscan API query assistant; it stores a Subscan API key in a user config file and calls Subscan endpoints — nothing appears disproportionate or unrelated to its stated purpose.

This skill appears to do what it claims: it helps pick endpoints and call the Subscan API. Before installing, be aware it will ask you to paste your Subscan API key and can save it to ~/.config/subscan-api-skill/key in plaintext so future calls can use --key-file; if you are uncomfortable storing the key, provide it per-call instead. Only use a key you trust with this agent and remove or rotate the key if you later uninstall the skill or lose trust. If you want extra assurance, inspect scripts/subscan_api.py yourself (it is included) to confirm there are no additional network endpoints or unexpected behavior.