v1.0.0

bitmart wallet skill

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:48 AM.

Analysis

The skill is a coherent, read-only BitMart API guide for market and wallet data, with the main user consideration that queried wallet addresses are sent to BitMart’s external API.

GuidanceThis looks safe to install for read-only BitMart market and wallet lookups. Before using it, understand that wallet addresses you ask it to analyze may be sent to BitMart’s API, and verify any swap quote or market data before making financial decisions elsewhere.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

SKILL.md

Base URL: `https://api-cloud.bitmart.com` ... `address-balance` ... `Address token balance list` ... `address-recent` ... `Address recent transactions` ... `If the user does not specify a chain, must query all supported chains (2001-2004, 2007).`

The skill directs the agent to call BitMart’s external API for wallet-address balance and transaction queries, and may query all supported chains when no chain is specified. This is read-only and aligned with the stated purpose, but users should realize their queried wallet address and request metadata may be visible to the API provider.

User impactIf you ask about a wallet address, that address may be sent to BitMart for lookup; this does not grant spending access or execute swaps.

RecommendationOnly query wallet addresses you are comfortable sharing with the BitMart API, and treat the results as external market/on-chain data rather than private account access.