ClawHub

check-transaction

v1.0.0

Allows users to check the status of a blockchain transaction by submitting a TxId. Queries the AOX transaction API and returns human-readable results.

⭐ 0· 208·0 current·0 all-time
by@charles-lpd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (check transaction status via AOX API) match the instructions: SKILL.md shows a public GET to https://api.aox.xyz/tx/[txid] and returns human-readable fields. Required binary is only curl, which is appropriate for the described task.
ℹ
Instruction Scope
Instructions are narrowly scoped to calling the AOX API and formatting results. They do not request filesystem reads, additional env vars, or sending data to other endpoints. Minor inconsistency: SKILL.md says TxId must start with 0x or valid AOX format while the provided example TxId uses the AOX format (no 0x); this is a small documentation ambiguity but not a security issue.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes risk because nothing is written to disk by an installer.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate for a public, unauthenticated API query. Note: invoking the skill will transmit any TxId you provide to api.aox.xyz, so treat TxIds as potentially sensitive if needed.
✓
Persistence & Privilege
always is false and the skill does not request persistent system changes or elevated privileges. Autonomous invocation is allowed (platform default) but does not combine with additional privileges.
Assessment
This skill appears to do exactly what it says: run a curl GET to https://api.aox.xyz/tx/[txid] and format the JSON. Before installing/using it, consider: (1) Do you trust the AOX domain (https://aox.xyz / api.aox.xyz)? Transactions you query will be sent to that external service. (2) If you need private/offline verification of transactions, this skill is not appropriate because it calls a public API. (3) The SKILL.md has a small doc ambiguity about TxId formats — if you see unexpected errors, try the AOX-style ID from the examples. If you’re comfortable with the external API and sending TxIds to it, this skill is proportionate and coherent.

Like a lobster shell, security has layers — review code before you run it.

latestvk975g1wc8hgmkh527yk5stpech82t0bx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💳 Clawdis
Binscurl

Comments