Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Blockchain Developer

v1.0.0

Generates personalized blockchain development career roadmaps based on user experience, skills, and professional goals.

0· 107·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for krishnakumarmahadevan-cmd/blockchain-developer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Blockchain Developer" (krishnakumarmahadevan-cmd/blockchain-developer) from ClawHub.
Skill page: https://clawhub.ai/krishnakumarmahadevan-cmd/blockchain-developer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install blockchain-developer

ClawHub CLI

Package manager switcher

npx clawhub@latest install blockchain-developer
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill claims to be an API-backed 'Blockchain Developer Roadmap' generator, and the OpenAPI describes the expected endpoints and request/response shapes — this aligns with the stated purpose. However, the package supplies no server/base URL, no example base endpoint, and no instructions for authentication or where to send requests. The presence of a pricing table implies a hosted commercial service, yet no host, API key name, or credential requirements are declared. This incomplete integration spec is inconsistent with the claim that the agent can integrate via RESTful POSTs without additional configuration.
Instruction Scope
SKILL.md contains only API usage docs and example requests/responses; it does not instruct the agent to read local files, environment variables, or sensitive system paths, nor does it instruct broad data collection. The instructions are limited to constructing and sending JSON payloads to the described endpoints. The missing runtime target (no host) is an operational gap but not an instruction to access unrelated data.
Install Mechanism
No install spec and no code files are included (instruction-only). Nothing is written to disk or downloaded during install, which minimizes install-time risk.
Credentials
The skill declares no required environment variables, credentials, or config paths — which is proportionate for a read-only documentation/guide skill. That said, because the documentation implies a hosted API with pricing, it would normally require an API key or account credentials; the absence of any declared credential or auth scheme is an inconsistency that should be clarified before runtime use (to know where and how user data would be sent).
Persistence & Privilege
The skill does not request always:true and is user-invocable only. There are no indications it will modify other skills or agent-wide settings. Autonomy (model invocation) is allowed by default but not combined with other high-risk indicators here.
Scan Findings in Context
[no-regex-findings] expected: The static regex scanner found nothing to analyze because this is an instruction-only skill with no code files. That is expected for pure documentation/OpenAPI packages, but absence of findings is not evidence that runtime behavior is safe — the runtime target and auth remain unspecified.
What to consider before installing
This skill is primarily API documentation and an OpenAPI spec for a hosted roadmap service, but it omits critical runtime details: there is no server/base URL, no authentication scheme, and the source/homepage is unknown. Before installing or invoking it, ask the publisher for the API host, the required authentication method (API key or OAuth), and the privacy policy governing user assessment data. Do not send real user PII or assessment data to this skill until you confirm the destination and that you trust the service. If you expected an offline/local roadmap generator, this skill is not suitable as-is.

Like a lobster shell, security has layers — review code before you run it.

latestvk976sgcrssyg9qz7xr7043y8w583g03r
107downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Overview

The Blockchain Developer Roadmap API is a professional entry-level career guidance platform designed to help aspiring developers navigate the blockchain industry. It leverages assessment data including experience level, technical skills, and career objectives to generate customized learning paths and skill development strategies.

This API is ideal for career counselors, educational platforms, recruitment agencies, and individual developers seeking structured guidance into blockchain development roles. The platform analyzes user profiles holistically to create actionable roadmaps that align with industry standards and market demands.

The API provides foundational endpoints for health monitoring, service status verification, and core roadmap generation functionality. Integration is straightforward via RESTful POST requests with structured JSON payloads containing assessment data and session information.

Usage

Example Request:

{
  "sessionId": "sess_abc123def456",
  "userId": 1001,
  "timestamp": "2024-01-15T10:30:00Z",
  "assessmentData": {
    "sessionId": "sess_abc123def456",
    "timestamp": "2024-01-15T10:30:00Z",
    "experience": {
      "yearsInTech": 2,
      "previousRoles": ["Junior Backend Developer", "QA Tester"],
      "industryExposure": "Traditional software development"
    },
    "skills": {
      "languages": ["JavaScript", "Python"],
      "databases": ["PostgreSQL", "MongoDB"],
      "frameworks": ["Node.js", "Django"],
      "certifications": []
    },
    "goals": {
      "targetRole": "Blockchain Developer",
      "timeframe": "12 months",
      "focusAreas": ["Smart Contracts", "Web3", "Ethereum"]
    }
  }
}

Example Response:

{
  "roadmapId": "roadmap_xyz789",
  "sessionId": "sess_abc123def456",
  "userId": 1001,
  "generatedAt": "2024-01-15T10:30:15Z",
  "phases": [
    {
      "phase": 1,
      "title": "Blockchain Fundamentals",
      "duration": "4 weeks",
      "topics": [
        "Blockchain architecture and consensus mechanisms",
        "Cryptography basics",
        "Bitcoin and Ethereum overview"
      ],
      "resources": [
        "Mastering Bitcoin (Book)",
        "Ethereum.org Documentation",
        "CryptoZombies Tutorial"
      ]
    },
    {
      "phase": 2,
      "title": "Smart Contract Development",
      "duration": "8 weeks",
      "topics": [
        "Solidity programming language",
        "Smart contract design patterns",
        "Testing and security auditing"
      ],
      "resources": [
        "Solidity Documentation",
        "Hardhat Development Framework",
        "OpenZeppelin Contracts Library"
      ]
    },
    {
      "phase": 3,
      "title": "Advanced Web3 Development",
      "duration": "6 weeks",
      "topics": [
        "Web3.js and Ethers.js libraries",
        "DApp architecture",
        "Integration with blockchain networks"
      ],
      "resources": [
        "Web3.js Documentation",
        "Ethers.js Guides",
        "MetaMask Developer Documentation"
      ]
    }
  ],
  "estimatedCompletionTime": "18 weeks",
  "nextMilestones": [
    "Complete blockchain fundamentals course",
    "Deploy first smart contract on testnet",
    "Build a simple DApp prototype"
  ],
  "recommendations": [
    "Join blockchain developer communities",
    "Contribute to open-source blockchain projects",
    "Complete relevant certifications"
  ]
}

Endpoints

GET /

Description: Root endpoint providing service information and availability status.

Parameters: None

Response: Service status and metadata object.


GET /health

Description: Health check endpoint for monitoring API availability and operational status.

Parameters: None

Response: Health status confirmation with timestamp.


POST /api/blockchain/roadmap

Description: Generates a personalized blockchain developer roadmap based on user assessment data, experience level, current skills, and career goals.

Parameters:

NameTypeRequiredDescription
sessionIdstringYesUnique session identifier for tracking user interactions and requests.
userIdinteger | nullNoOptional user identifier for account linkage and profile tracking.
timestampstringYesISO 8601 formatted timestamp indicating when the assessment was conducted.
assessmentDataobjectYesContainer object holding detailed assessment information.
assessmentData.sessionIdstringYesSession identifier matching the parent request sessionId for consistency.
assessmentData.timestampstringYesISO 8601 formatted timestamp of assessment data capture.
assessmentData.experienceobjectNoObject detailing professional background, years in technology, and previous roles.
assessmentData.skillsobjectNoObject listing technical competencies including programming languages, frameworks, and databases.
assessmentData.goalsobjectNoObject defining career objectives, target roles, and focus areas in blockchain development.

Response: Personalized roadmap object containing:

  • Phased learning plan with duration estimates
  • Topic-specific skill development areas
  • Curated learning resources and materials
  • Milestone checkpoints and achievement criteria
  • Professional recommendations tailored to user profile
  • Estimated total completion timeframe

Error Responses:

  • 422 Validation Error: Invalid or missing required fields in request payload.

Pricing

PlanCalls/DayCalls/MonthPrice
Free550Free
Developer20500$39/mo
Professional2005,000$99/mo
Enterprise100,0001,000,000$299/mo

About

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

References

Comments

Loading comments...