ConsortiumAI Create Account
PassAudited by ClawScan on May 10, 2026.
Overview
The skill appears to do the advertised account-creation API call, but it uses a Consortium AI API key and creates a remote custodial wallet account, so users should run it deliberately.
Before installing or running, confirm that you trust Consortium AI, that the TRADING_ANALYSIS_API_KEY is meant for this API, and that you intend to create a custodial wallet account for the supplied wallet address. The provided code matches the documented purpose and does not show hidden exfiltration or background behavior.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the API key is available in the environment, the skill can use it to create custodial wallet accounts through Consortium AI.
The script reads a local API key and sends it to the Consortium AI API for authentication. This is disclosed and purpose-aligned, but it gives the skill delegated authority on that service.
const apiKey = process.env.TRADING_ANALYSIS_API_KEY; ... 'x-api-key': apiKey
Set the API key only when needed, use a restricted or revocable key if available, and rotate it if it may have been exposed.
Running the skill with a wallet address may create a new custodial wallet account on the provider service.
The skill performs a state-changing external API action. This matches the stated purpose, but creating a custodial wallet account is a meaningful remote action.
POST https://api.consortiumai.org/api/custodial-wallet/create-with-api-key Creates a new custodial wallet account.
Invoke the skill only when you intend to create the account, and verify the wallet address before running it.
An installer or user may not see the API-key requirement until reading SKILL.md or running the script.
The registry metadata does not declare required environment variables, while SKILL.md and the script require TRADING_ANALYSIS_API_KEY. The requirement is documented in the skill content, but not surfaced in metadata.
Required env vars: none
Update the registry metadata to declare TRADING_ANALYSIS_API_KEY as a required credential or environment variable.