Spacescan
v1.0.0Access Chia blockchain data including blocks, transactions, addresses, CAT tokens, NFTs, network stats, and XCH price via Spacescan.io API with an API key.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/README/SKILL.md and the included code implement a client for Spacescan.io (Chia blockchain explorer). The only credential referenced (SPACESCAN_API_KEY) is appropriate for that purpose. No unrelated binaries, credentials, or config paths are requested.
Instruction Scope
SKILL.md and index.js only instruct the agent/user to call the Spacescan API and to set SPACESCAN_API_KEY. The README suggests appending the key to shell profiles (echo 'export ...' >> ~/.zshrc) and using npm link to create global commands — these are benign but do persist to user shell/global PATH if the user follows them, so users should be aware before running those commands.
Install Mechanism
There is no registry install spec; the bundle provides an install.sh that runs npm install and the package.json declares standard npm dependencies (axios). Dependencies come from the npm registry (package-lock.json). No arbitrary HTTP downloads, shorteners, or extraction from unknown servers were found.
Credentials
Only SPACESCAN_API_KEY is required and the code explicitly reads process.env.SPACESCAN_API_KEY. No other secrets or unrelated environment variables/config paths are requested.
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or system agent configs. Installation guidance includes npm link (creates global CLI entries) and shell-profile edits which create persistent system changes if executed — these are user-driven, not automatic, but users should be aware.
Assessment
This skill appears to be what it says: a Spacescan.io client that needs only a Spacescan API key. Before installing, verify you obtained your key from the official https://www.spacescan.io/apis page; avoid pasting the key into public places or git history. If you prefer not to append the key into ~/.zshrc or ~/.bashrc, keep it in a session-only environment or use a secret manager. Running the provided install.sh will run npm install (check dependencies and run npm audit if desired) and the README suggests npm link which places a global 'scan'/'spacescan' binary — only run that if you want a global CLI. Finally, review network calls/logging policies (to ensure the API key isn't accidentally logged) and consider rate limits on the free tier.Like a lobster shell, security has layers — review code before you run it.
latest
Spacescan Skill
Explore the Chia blockchain via Spacescan.io API.
What It Does
- View blocks and transactions
- Check address balances
- Monitor network statistics
- Search blockchain data
- Track CAT tokens and NFTs
- Get XCH price
⚠️ API Key Required
Spacescan requires an API key. Get yours at: https://www.spacescan.io/apis
Set the environment variable:
export SPACESCAN_API_KEY=your_key_here
Or add to your shell profile (~/.zshrc or ~/.bashrc):
echo 'export SPACESCAN_API_KEY=your_key_here' >> ~/.zshrc
source ~/.zshrc
Commands
All commands can be triggered via:
/scan <command>in Telegram/spacescan <command>in Telegramscan <command>in CLIspacescan <command>in CLI
Blocks
/scan block latest Get latest block
/scan block <height> Get block by height
/scan block <hash> Get block by hash
/scan blocks <start> <end> Get block range
Transactions
/scan tx <id> Get transaction details
Addresses
/scan address <addr> Get address info
/scan address balance <a> Get address balance
/scan address txs <addr> Get recent transactions
Coins
/scan coin <id> Get coin details
Network
/scan stats Network statistics
/scan network Network info
/scan space Network space (EiB)
/scan mempool Mempool status
/scan price XCH price
Tokens
/scan cats List CAT tokens
/scan cat <id> Get CAT details
NFTs
/scan nft <id> Get NFT details
Search
/scan search <query> Search blockchain
/scan <long_hash> Quick search
Agent Usage
const { handleCommand } = require('./skills/spacescan');
// Requires SPACESCAN_API_KEY environment variable
const output = await handleCommand('block latest');
API Client
const SpacescanAPI = require('./skills/spacescan/lib/api');
const api = new SpacescanAPI('your-api-key');
// Get latest block
const block = await api.getLatestBlock();
// Get address balance
const balance = await api.getAddressBalance('xch1...');
// Get network stats
const stats = await api.getNetworkStats();
// Search
const result = await api.search('xch1...');
Installation
cd skills/spacescan
npm install
chmod +x cli.js
npm link # Makes 'scan' and 'spacescan' global
Configuration
Required: Set your API key
export SPACESCAN_API_KEY=your_key_here
Get your key at: https://www.spacescan.io/apis
Free tier available with rate limits.
Examples
Check latest block:
/scan block latest
Get address balance:
/scan address balance xch1...
Network stats:
/scan stats
XCH price:
/scan price
Support
- Spacescan: https://www.spacescan.io
- API Plans: https://www.spacescan.io/apis
- Bug reports: File in skill repository
Comments
Loading comments...
