Ai Intelligent Blockchain Platform

PassAudited by ClawScan on May 1, 2026.

Overview

No malicious behavior is shown in the included files, but the skill points users to external blockchain app code and mentions wallet management, so users should verify it before use.

Before installing, review the external GitHub repository and dependency list. If you try the platform, use a virtual environment and test wallets/testnets first, and do not provide seed phrases, private keys, or real wallet permissions unless you have independently verified the code and understand each transaction.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the user follows these commands, they may execute code and dependencies that were not included in this review.

Why it was flagged

The skill package itself contains no app code or install spec, but the documentation directs the user to fetch dependencies and run code from an external repository.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-blockchain-platform
cd ai-intelligent-blockchain-platform
pip install -r requirements.txt
python app.py

Recommendation

Inspect the external repository and requirements before running them, use a virtual environment, and avoid providing secrets or real wallet access until the code is trusted.

Low

#ASI03: Identity and Privilege Abuse

What this means

Using wallet-related features without reviewing their scope could expose sensitive wallet access or enable unintended blockchain actions.

Why it was flagged

Wallet management is aligned with a blockchain platform, but it can involve sensitive blockchain accounts or assets; the artifact does not define private-key handling, transaction approval, or account scope.

Skill content

- 钱包管理（多链支持）

Recommendation

Use test wallets or testnets first, never share seed phrases/private keys with unreviewed software, and require explicit approval for deployments or transactions.

Info

#ASI09: Human-Agent Trust Exploitation

What this means

A user might over-trust the skill if they assume it is officially authored or reviewed.

Why it was flagged

The SKILL.md author line presents an OpenClaw-team identity, while the supplied metadata lists an unknown source and skill.json lists a different author; this is a provenance inconsistency users should verify.

Skill content

作者：OpenClaw Skills Team

Recommendation

Verify the publisher and repository ownership independently before relying on the skill, especially for blockchain or wallet workflows.