📦 OpenScan Crypto — 链上数据速查
v1.0.0通过 OpenScan 基础设施快速导航与查询主流加密网络，一键获取 ETH、ERC20、BTC 等地址余额、区块高度、交易哈希及 Gas 费用等实时链上数据，支持多链聚合检索与结构化返回，为钱包、DeFi、审计、报表等场景提供精准数据源。
0· 362·0 当前·0 累计
by 下载技能包
最后更新
2026/2/28
安全扫描
OpenClaw
安全
medium confidenceThe skill is internally consistent with a blockchain-query CLI: it fetches curated metadata and RPC lists, performs read-only RPC calls, and stores its cache/config under the user's home directory — but it relies on remote metadata/npm packages and persists config which you should review before use.
评估建议
This skill appears to do what it says: a read-only blockchain query CLI that fetches metadata from jsDelivr/npm and may install an npm dependency. Before installing, consider: 1) inspect package.json/@openscan/network-connectors (npm package) or run npm install in an isolated environment to reduce supply-chain risk; 2) be aware the CLI will create ~/.config/openscan-crypto/rpc-config.json and ~/.cache/openscan-crypto, and will fetch metadata from the npm registry and jsDelivr plus 4byte.director...详细分析 ▾
✓ 用途与能力
Name/description match the code and CLI: the code implements network listing, token lookup, event decoding, price-from-pools, RPC management, and EVM/BTC queries. Requested dependencies (npm @openscan/network-connectors) and CDN metadata are coherent with a network/RPC-focused tool.
ℹ 指令范围
Runtime instructions and CLI operate as expected, but the CLI auto-fetches metadata from jsDelivr/npm and persists RPC configuration and cached metadata under ~/.config/openscan-crypto and ~/.cache/openscan-crypto. It also makes runtime HTTP(S) requests to 4byte.directory, the npm registry, the CDN, and configured RPC endpoints — all consistent with its purpose but worth being aware of.
ℹ 安装机制
Registry metadata lists no install spec, however the repo includes install.sh and package.json; installation relies on npm install to pull @openscan/network-connectors. Pulling packages from npm and fetching metadata from jsDelivr/npm registry is standard for this kind of tool but adds supply-chain risk (third-party packages and remote metadata).
✓ 凭证需求
The skill requests no environment variables or credentials. It reads and writes only its own config/cache files under the user's home directory (~/.config/openscan-crypto, ~/.cache/openscan-crypto), which is proportionate for a CLI that caches metadata and stores RPC selections.
✓ 持久化与权限
always:false and no attempt to modify other skills or global agent settings. The skill persists its own configuration and cache under user-owned paths only; this is expected behavior for a CLI and within the scope of its stated functionality.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/27
Full EVM + Bitcoin + ENS + price + decode-tx + address-info + RPC management
● 无害
安装命令
点击复制官方npx clawhub@latest install openscan-crypto
镜像加速npx clawhub@latest install openscan-crypto --registry https://cn.longxiaskill.com