Skylens Transaction Analysis

v1.0.0

Inspects one EVM transaction with Skylens APIs and returns human-readable trace, balance, storage, and nonce changes. Use when the user asks for tx-level inv...

0· 94·0 current·0 all-time
byCertiK@certik-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, SKILL.md, README, and the bundled scripts/skylens.py all consistently implement transaction-level inspection via Skylens APIs (trace, balance, state, nonce, source files). The only network host used is skylens.certik.com, which aligns with the stated purpose.
Instruction Scope
Runtime instructions instruct the agent to exec the included Python script and call Skylens endpoints. This stays within the stated purpose. Note: the get-source-file command can save downloaded source to an arbitrary path when --OUTPUT is provided, so the agent (or user) could write files to disk — expected for this tool but something to be conscious of.
Install Mechanism
There is no install spec (instruction-only with a bundled script). The script requires a zstd backend (Python 3.14's compression.zstd or the pip package zstandard) but the skill does not provide an automated installer; that may cause runtime failures if the environment lacks the dependency. No arbitrary downloads or external install URLs are used by the skill itself.
Credentials
The skill declares no required environment variables or credentials. The script performs only outbound HTTPS calls to skylens.certik.com and does not read declared secrets or unrelated config paths in the provided code. No excessive or unrelated environment access is requested.
Persistence & Privilege
always:false (default) and the skill does not attempt to persist configuration or modify other skills. It only includes an executable script within its own directory; no elevated or permanent privileges are requested.
Assessment
This skill appears to do what it claims: it runs a bundled Python CLI that queries Skylens (skylens.certik.com) and prints or optionally writes results. Before installing, confirm you trust skylens.certik.com and are comfortable granting outbound HTTPS access. Ensure the runtime has a zstd backend (Python 3.14+ or the zstandard package) or the script may fail. Be aware that get-source-file --OUTPUT can write files to arbitrary paths if chosen — avoid running it with sensitive system paths. No credentials are requested by the skill itself; if you see prompts for API keys or tokens later, treat them as unexpected and investigate.

Like a lobster shell, security has layers — review code before you run it.

latestvk971syy0gn01rvcya3m9kmxcs9832hh8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments