emily
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a Radix blockchain lookup skill with disclosed external MCP setup, but users should know their wallet or token queries may be sent to the Emily service.
This skill looks reasonable for Radix data lookup. Before installing, make sure you are comfortable installing the mcporter npm package and sending Radix addresses or .xrd domains you query to the Emily remote MCP endpoint.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may install a third-party CLI package whose future behavior depends on the npm package supplied.
The skill relies on an external npm package to provide the mcporter CLI, and the provided install spec does not show a pinned version. This is central to the skill's MCP setup, but users should still trust the package source before installing.
node | package: mcporter | creates binaries: mcporter
Install only if you trust the mcporter package source; use a pinned or reviewed version if your environment requires stronger supply-chain control.
Addresses or domains you ask about could be visible to the Emily service provider, even though Radix blockchain data itself is public.
The skill registers a remote MCP endpoint for its Radix tools, so queries such as wallet addresses, token addresses, and .xrd domains may be sent to that external service.
mcporter config add emily-radix-assistant https://www.ineedemily.com/api/mcp/mcp
Avoid querying addresses you consider private unless you are comfortable sharing them with the external MCP provider.