Qelt Indexer
v0.1.0Query QELT blockchain data—blocks, transactions, address history, ERC-20 token balances, and indexer sync status—via the Mainnet Indexer REST API.
⭐ 0· 243·0 current·0 all-time
by@prqelt
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actual instructions: the SKILL.md documents GET endpoints for blocks, transactions, addresses, balances and health checks on mnindexer.qelt.ai/tnindexer.qelt.ai. No credentials, installs, or unrelated binaries are required for the documented functionality. Minor inconsistency: SKILL.md metadata lists curl as a required binary while the registry metadata lists no required binaries—this is a documentation mismatch but not a functional red flag.
Instruction Scope
Instructions are narrowly scoped to read-only HTTP GET calls to the advertised indexer endpoints and include sensible guidance (check sync, use pagination, backoff on 503). They do not instruct reading local files or accessing unrelated environment variables. Important privacy note: the skill will send whatever transaction hashes or wallet addresses the user/agent provides to an external service (mnindexer.qelt.ai / tnindexer.qelt.ai), which can leak ownership or query intent to that third party. The references also list contract-verification POST endpoints (upload surface) though the main PROCEDURE does not instruct uploads.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. All runtime actions are curl-based HTTP requests; nothing is written to disk by the skill itself. No downloads or archive extraction are present.
Credentials
The skill declares no required environment variables or credentials, which is proportionate for a public, unauthenticated read-only indexer. No config paths or secret-like env names are requested. (Note: SKILL.md suggests using curl is expected; if your agent environment lacks curl, it may need that binary.)
Persistence & Privilege
always:false and no install persistence; the skill does not request permanent agent presence or modification of other skills. Autonomous invocation is allowed by default (platform default) but not combined with other elevated privileges here.
Assessment
This skill appears to do what it says: make read-only queries to the QELT indexer. Before installing, confirm you trust the endpoint host (https://mnindexer.qelt.ai and https://tnindexer.qelt.ai). Be aware of privacy: any wallet addresses or transaction hashes you ask the agent to look up will be sent to that external service. If you need strong privacy or absolute real-time accuracy, consider running or using your own JSON-RPC node instead of a public indexer. Note the small documentation mismatch: SKILL.md mentions curl as a required tool—ensure your agent environment provides curl or equivalent HTTP capability. Finally, if you plan to use contract verification endpoints (they are listed in references), verify what data is uploaded and whether that is acceptable.Like a lobster shell, security has layers — review code before you run it.
latestvk97dnx6tsvk9df6q65aw4b45e982ckq4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.