Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Analyzes Ethereum addresses for phishing, honeypots, rug pulls, and exploit group activity using a local SQLite database. A background worker syncs data from Etherscan so user-facing checks never make external API calls. Unknown addresses are queued automatically for the next sync cycle.
Queries a local database instead of making live API calls, so results come back in under 5ms with no rate limits on user-facing checks.
When to use it
- Verifying an Ethereum address before sending funds
- Checking a wallet that sent an unsolicited transaction
- Screening a DeFi contract address before approving a token transfer
- Validating addresses from airdrop or reward announcements
- Reviewing a wallet linked in a crypto community message
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Is 0x098b716b8aaf21512996dc57eb0615e2383e2f96 safe to send ETH to?
- 1Runs crypto_check_db.py against the local SQLite database
- 2Retrieves the stored risk score, scam indicators, and flagged transaction records
- 3Decodes transaction message data and matches against suspicious keyword patterns
- 4Identifies references to Lazarus group, private key phishing, and exploit recruitment
- 5Returns a structured report with risk level and recommendations
Risk score 100/100 - CRITICAL RISK. Five scam indicators detected including exploit group references and private key phishing. Recommendation: do not send funds and report the source.
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.