Qrcoin

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent for QR Coin auctions, but it involves real USDC approvals and blockchain transactions that users should verify before signing.

Use this only if you intend to participate in QR Coin auctions. Treat every Bankr or wallet signing step as a real financial action: verify the official QR Coin site, contract addresses, active auction ID, URL/name, network, USDC amount, and approval allowance before signing.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken token ID, URL, contract address, or transaction could commit USDC to the wrong auction action.

Why it was flagged

The skill instructs use of an external transaction tool to submit blockchain actions. This is purpose-aligned for bidding, but it can spend funds if the user signs the transaction.

Skill content
Use Bankr to execute these — Bankr handles: ... Transaction signing and submission
Recommendation

Before signing in Bankr or a wallet, verify the contract address, active token ID, function call, URL/name, network, and displayed USDC amount.

What this means

The auction contract may be able to spend up to the approved USDC allowance according to its contract logic.

Why it was flagged

Approving USDC grants the auction contract delegated spending authority up to the approved amount. The allowance is disclosed and scoped, but it is still a sensitive wallet permission.

Skill content
Before bidding, approve the auction contract to spend USDC: ... Approve 50 USDC to 0x7309779122069EFa06ef71a45AE0DB55A259A176 on Base
Recommendation

Approve only an amount you are comfortable risking, confirm the spender address carefully, and consider revoking unused allowance after bidding.