ClawHub

Ethereum

v1.0.0

Assist with Ethereum transactions, gas optimization, token approvals, and L2 bridges.

⭐ 2· 1.3k·7 current·7 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The SKILL.md content (nonces, EIP-1559 gas, token approvals, L2 bridging, MEV, address validation) directly matches the name and description. There are no unrelated required binaries, env vars, or config paths.
ℹ
Instruction Scope
Instructions are purely advisory and reference reputable third-party services (etherscan, revoke.cash, Tenderly, Flashbots). They do not instruct the agent to read local files, environment variables, or send data to unexpected endpoints. Note: the guidance recommends using external RPC/relay services (e.g., protect.flashbots.net), which is expected for MEV protection but means transactions could be routed through those third parties—users should be aware of privacy/trust tradeoffs.
✓
Install Mechanism
No install spec and no code files (instruction-only). Nothing is written to disk and no third-party packages are pulled.
✓
Credentials
The skill requests no environment variables, credentials, or config paths; this is proportionate to an advisory skill about Ethereum usage.
✓
Persistence & Privilege
always is false and the skill is user-invocable. The skill does not request permanent presence or access to other skills' configs.
Scan Findings in Context
[no-findings] expected: The regex scanner found nothing because this is an instruction-only skill with no code files. That absence is expected for a text guidance skill, but does not prove safety beyond content review.
Assessment
This skill is a text-only advisor about Ethereum operations and appears internally consistent. Before installing: do not provide private keys or wallet mnemonics to any skill; test any procedural advice (nonce replacement, approvals, bridging) on small amounts first; verify third-party endpoints (etherscan, revoke.cash, Tenderly, Flashbots) you use are the official domains; understand that sending transactions through third-party RPC/relay services has privacy/trust implications. If the skill later adds code, install steps, or requests credentials, stop and re-evaluate because those would materially change the risk profile.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e393vt8pm2xhbg2rf9nxkqh80v440

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⟠ Clawdis
OSLinux · macOS · Windows

Comments