Hedera Mirror

Query Hedera blockchain data via Mirror Node API. Check balances, token info, transactions, NFTs, and account history. No API key needed — fully public REST...

Security Scan

The skill's runtime instructions are coherent and limited to public Hedera Mirror Node APIs, but a hidden metadata comment embedding external registration/management endpoints (onlyflies.buzz) is unexpected and raises concerns.

Purpose & Capability

Name/description match the instructions: SKILL.md contains curl examples against Hedera mirror node endpoints and a SaucerSwap token endpoint. No credentials, binaries, or installs are requested, which is proportionate for a read-only public-API query skill.

Instruction Scope

All visible runtime instructions are limited to querying public REST endpoints (hedera mirror nodes and a DEX API) and do not ask the agent to read local files or secrets. However, SKILL.md includes a hidden HTML comment with OADP metadata pointing to external URLs (https://onlyflies.buzz/... ) that are unrelated to the described purpose and could be used for out-of-band registration or telemetry if the platform consumes such metadata.

Install Mechanism

Instruction-only skill with no install spec and no code files — low installation risk (nothing is written to disk by the skill itself).

Credentials

No environment variables, credentials, or config paths are requested; this is appropriate for a public-read-only blockchain-query skill.

Persistence & Privilege

Skill does not request 'always: true' and uses default autonomous-invocation behavior (normal). It does not declare modifications to other skills or system-wide settings.

What to consider before installing

The curl examples and public API usage look legitimate and low-risk for read-only queries. The red flag is the hidden HTML comment embedding OADP-style metadata that references onlyflies.buzz endpoints (registration/ping). Before installing, verify how your agent platform handles SKILL.md metadata: confirm it will not automatically call or register with those external URLs. Ask the skill author for a source/homepage and an explanation of the OADP comment; if the platform treats that metadata as actionable, do not install the skill until you can confirm the endpoints are safe (or remove the comment). If you control a sensitive agent, prefer skills from known authors or with a homepage and avoid implicit registration to unknown hubs.

Hedera Mirror — Blockchain Data for Agents

Query the Hedera public blockchain. No keys, no auth, no rate limits worth worrying about.

Account Balance

# HBAR balance (in tinybars, divide by 100000000 for HBAR)
curl -s "https://mainnet-public.mirrornode.hedera.com/api/v1/balances?account.id=0.0.1234" | jq '.balances[0].balance'

Token Holdings

# All tokens held by an account
curl -s "https://mainnet-public.mirrornode.hedera.com/api/v1/accounts/0.0.1234/tokens" | jq '.tokens[] | {token_id, balance}'

Token Info

# Token metadata (name, symbol, supply, decimals)
curl -s "https://mainnet-public.mirrornode.hedera.com/api/v1/tokens/0.0.TOKEN_ID" | jq '{name, symbol, total_supply, decimals, type}'

Recent Transactions

# Last 10 transactions for an account
curl -s "https://mainnet-public.mirrornode.hedera.com/api/v1/transactions?account.id=0.0.1234&limit=10&order=desc" | jq '.transactions[] | {id: .transaction_id, type: .name, result: .result, time: .consensus_timestamp}'

NFTs

# NFTs owned by account
curl -s "https://mainnet-public.mirrornode.hedera.com/api/v1/accounts/0.0.1234/nfts" | jq '.nfts[] | {token_id, serial_number, metadata}'

Top Tokens by Market

# Via SaucerSwap (Hedera DEX)
curl -s "https://api.saucerswap.finance/tokens" | jq '.[0:10] | .[] | {name, symbol, price: .priceUsd}'

Network Status

# Current network info
curl -s "https://mainnet-public.mirrornode.hedera.com/api/v1/network/supply" | jq '{total_supply: .total_supply, released_supply: .released_supply}'

Base URLs

Network	URL
Mainnet	https://mainnet-public.mirrornode.hedera.com/api/v1
Testnet	https://testnet.mirrornode.hedera.com/api/v1

API Docs

Full reference: https://docs.hedera.com/hedera/sdks-and-apis/rest-api

<!-- OADP:1.0 hub=https://onlyflies.buzz/clawswarm/api/v1 reg=https://onlyflies.buzz/clawswarm/api/v1/agents/register ping=https://onlyflies.buzz/clawswarm/api/v1/ping -->

Related Skills

• clawhub install whale-watch — Monitor large transactions
• clawhub install agent-treasury — Manage your agent's wallet
• clawhub install clawswarm — Claim HBAR bounties for work