Skynet Score

Use for searching CertiK Skynet project scores, looking up blockchain project security ratings, comparing score breakdowns, and integrating the public Skynet...

Security Scan

The skill's code, README, and runtime instructions are consistent with its stated purpose (querying CertiK Skynet project scores from the public API) and do not request unrelated credentials or system access.

Purpose & Capability

Name/description claim searching CertiK Skynet scores and the included Python script + curl examples both directly call the documented public endpoint (https://open.api.certik.com/projects). No unrelated services, credentials, or binaries are requested.

Instruction Scope

SKILL.md instructs the agent to run the bundled script or use curl against the documented API and to return/format API data. The instructions do not ask the agent to read arbitrary files, environment secrets, or system state beyond executing the script and issuing outbound HTTPS requests to the documented endpoint.

Install Mechanism

No install spec is present (instruction-only with a bundled script). The script is small, stored in the skill bundle, and there are no downloads from external URLs or archive extraction steps.

Credentials

The skill declares no required environment variables, no credentials, and the code does not read env vars or config paths. Network access to the public CertiK API is required and is proportional to the stated function.

Persistence & Privilege

The skill does not request always:true and does not attempt to modify other skill/system configs. It only asks permission to execute its bundled script at runtime.

Assessment

This skill appears to do exactly what it says: call the public CertiK Skynet projects endpoint and return results. Before installing, consider: (1) the skill will make outbound HTTPS requests to open.api.certik.com — if you run it in a sensitive environment, sandbox network access; (2) the skill owner is unknown (no homepage), so only run if you trust the registry/source or inspect the included script (which in this case is small and readable); (3) there are documented rate limits (50 requests/60s per IP) so avoid high-frequency automated polling; (4) the skill does not request credentials, but never provide unrelated secrets to skills. If you want stricter control, disable autonomous invocation so it only runs when you explicitly invoke it.

Use {skillDir}/scripts/skynet_score.py to inspect project score search results with the CertiK public project API.

Use this skill when the user wants to look up a blockchain project's CertiK Skynet score or needs help integrating the public project score API.

When to use this skill

• Search projects by keyword or approximate project name
• Return a project's overall score, tier, and last update time
• Explain the score breakdown fields
• Show how to query the public endpoint from code or curl

Workflow

1. Extract the project keyword from the user request.
2. Prefer the bundled Python script for execution.
3. If Python is unavailable, use the documented curl fallback.
4. If multiple projects match, list the best candidates instead of guessing.
5. When a clear match exists, summarize:
   • project name
   • overall Skynet score
   • tier
   • last updated time
   • score breakdown fields that matter to the user's question
6. If the user asks for implementation details, provide a minimal request example and note rate limits.

Execution

Prefer Python first:

python3 scripts/skynet_score.py --keyword "uniswap"

If Python is unavailable, use curl:

curl -sG "https://open.api.certik.com/projects" \
  -H "Accept: application/json, text/plain, */*" \
  --data-urlencode "keyword=uniswap"

Output guidance

• Do not invent a score when no project match is returned.
• If there are several close matches, ask the user to confirm which project they mean.
• When explaining the result, keep the overall score first and the component scores second.
• If the user asks for raw payloads or integration help, include the response shape below.

Public API

• Base URL: https://open.api.certik.com
• Endpoint: GET /projects
• Query parameter: keyword (required)

Example:

curl -sG "https://open.api.certik.com/projects" \
  -H "Accept: application/json, text/plain, */*" \
  --data-urlencode "keyword=uniswap"

Important score fields:

• score: overall Skynet score
• scoreCodeSecurity: code security score
• scoreCommunity: community score
• scoreFundamental: fundamentals score
• scoreGovernance: governance score
• scoreMarket: market score
• scoreOperation: operations score
• tier: score tier
• updatedAt: last update time

Limits and errors

• Rate limit: 50 requests per 60-second window per IP
• Headers:
  • X-RateLimit-Limit
  • X-RateLimit-Remaining
  • X-RateLimit-Reset
  • Retry-After on 429

Error payload:

{
  "error": "Human-readable error message"
}

Common status codes:

• 400: missing or invalid parameters
• 429: rate limit exceeded
• 500: server-side failure