secure-workflow-guide
skills.shDev & deploy
Guides through Trail of Bits' 5-step secure development workflow.
- Installs
- 7,218
- Hosts contacted
- 1
No flags, not observed
View skill
Crypto Agent Skills
Browse skills for crypto agents and see what each one touches before you install it.
- Skills indexed565
- With a flag235
- Registries2
- Updated2026-10-19
Browse skills
136 skills · as of 2026-10-19
FlagsFlagsA flag marks something the skill's own files do, like handling keys or running a shell command. It describes the skill and does not accuse it. A skill with no flags is not cleared either.
code-maturity-assessor
skills.shDev & deploySystematic code maturity assessment using Trail of Bits' 9-category framework.
- Installs
- 6,946
- Hosts contacted
- 0
No flags, not observedView skillquery-token-audit
skills.shDev & deployNo description published.
- Installs
- 6,741
- Hosts contacted
- 1
No flags, not observedView skillproperty-based-testing
skills.shDev & deployWrites, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or…
- Installs
- 6,709
- Hosts contacted
- 1
Runs fetched codeRuns fetched codeRuns code it downloaded or decoded while running.View skillbmad-build
skills.shDev & deployTurns implementation work into working code, reviewed and verified.
- Installs
- 6,350
- Hosts contacted
- 0
No flags, not observedView skillaudit-prep-assistant
skills.shDev & deployPrepares codebases for security review using Trail of Bits' checklist.
- Installs
- 5,535
- Hosts contacted
- 0
No flags, not observedView skillentry-point-analyzer
skills.shDev & deployAnalyzes smart contract codebases to identify state-changing entry points for security auditing.
- Installs
- 5,525
- Hosts contacted
- 0
No flags, not observedView skillbackend-patterns
skills.shDev & deployBackend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express…
- Installs
- 5,517
- Hosts contacted
- 0
No flags, not observedView skillsolana-vulnerability-scanner
skills.shDev & deployScans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing…
- Installs
- 5,510
- Hosts contacted
- 2
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skillcosmos-vulnerability-scanner
skills.shDev & deployScans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund…
- Installs
- 5,160
- Hosts contacted
- 23
No flags, not observedView skille2e-testing
skills.shDev & deployPlaywright E2E testing patterns, Page Object Model, configuration, CI/CD integration, artifact management, and flaky…
- Installs
- 4,671
- Hosts contacted
- 0
No flags, not observedView skillnodejs-keccak256
skills.shDev & deployJavaScriptとTypeScriptにおけるEthereumハッシュバグを防ぐ。NodeのSHA3-256はNIST SHA3であり、Ethereum…
- Installs
- 4,435
- Hosts contacted
- 0
No flags, not observedView skillsolana-mobile-publishing
skills.shDev & deployBuild, sign, and publish an Android APK to the Solana dApp Store with the dapp-store CLI.
- Installs
- 4,173
- Hosts contacted
- 3
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skillx402 Compute
ClawHubDev & deployProvision GPU instance, integrate agent pods over an API, create pods for my customers, pod webhooks.
- Installs
- 3,971
- Hosts contacted
- 6
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.Reads secret filesReads secret filesReads files that hold secrets, like ~/.ssh or .env.+2More flagsPipes to shell · Runs on a scheduleView skillERC-8004 Trustless Agents
ClawHubDev & deployERC-8004 Trustless Agents - Register, discover, and build reputation for AI agents on Ethereum.
- Installs
- 3,687
- Hosts contacted
- 9
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.Pipes to shellPipes to shellDownloads a script and runs it in a shell (curl | sh).View skillEnables AI agents to log immutable, encrypted audit trails on Bitcoin SV for persistent memory, self-reflection, and…
- Installs
- 3,439
- Hosts contacted
- 4
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skillsmart-contract-vulnerabilities
skills.shDev & deployNo description published.
- Installs
- 3,429
- Hosts contacted
- 0
No flags, not observedView skillAgent identity and reputation registration
ClawHubDev & deployRegister and manage agent identity, reputation, and feedback on Solana and EVM chains using the multi-chain ERC-8004…
- Installs
- 3,417
- Hosts contacted
- 1
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skillWarren - On-Chain Website Deploy
ClawHubDev & deployDeploy websites and files permanently on MegaETH blockchain.
- Installs
- 3,206
- Hosts contacted
- 3
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skillEthereum Wingman
ClawHubDev & deployEthereum development tutor and builder for Scaffold-ETH 2 projects.
- Installs
- 2,908
- Hosts contacted
- 0
Runs on a scheduleRuns on a scheduleSets itself up to run again later, like a cron job.View skillWarren - On-Chain NFT Deploy
ClawHubDev & deployDeploy NFT collections permanently on MegaETH blockchain. Images stored on-chain via SSTORE2.
- Installs
- 2,710
- Hosts contacted
- 3
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skillOn-Chain Skill Audit
ClawHubDev & deployOn-chain skill provenance registry. Check, register, audit, and vouch for agent skills on Solana.
- Installs
- 2,706
- Hosts contacted
- 1
No flags, not observedView skilledge
skills.shDev & deployConfigure and troubleshoot Goldsky Edge, Goldsky's managed EVM RPC endpoint service.
- Installs
- 2,616
- Hosts contacted
- 2
No flags, not observedView skillDoppel ERC-8004
ClawHubDev & deployRegister your agent onchain with ERC-8004. Set up a wallet, fund it, register on the Identity Registry, and link your…
- Installs
- 2,580
- Hosts contacted
- 9
Handles keysHandles keysCreates or reads a private key or seed phrase. Normal for wallets.View skill
How we read skillsShowHide
A skill is a document an agent follows. Before you install one that can touch a wallet, this page shows what it declares and what its text does: the hosts it contacts, whether it generates keys, whether it asks you to paste a credential, whether it pipes the internet into a shell.
Each disclosure is a static pattern scan of the skill's own files. It describes and does not judge. A flag is not an accusation: a wallet skill that generates keys is doing its job. No flag is not a clearance. Where a registry publishes its own scan result, the skill's page shows it as that registry's result, not ours.
We index crypto-related skills from ClawHub and skills.sh and scan them again every week. When a skill's SKILL.md file changes, we record the new version.
Categories come from the words in each skill's name and description. Each skill sits in one category.
- Handles keys: Generates or handles private keys.
- Asks for secrets: Asks the user to paste a credential.
- Reads secret files: Reads secret paths (~/.ssh, .env …).
- Pipes to shell: Pipes a remote script into a shell.
- Runs fetched code: Executes fetched or decoded code.
- All tools: Grants itself unrestricted tools.
- Registers agent: Registers the agent with a third-party host.
- Runs on a schedule: Schedules itself to run repeatedly.
Download the data as JSON (CC-BY 4.0).
Reference
QuestionsWhat people ask about this pageShowHide
Questions people ask about crypto agent skills
- What is an agent skill?
- A document an agent follows — instructions, often with scripts beside them — installed into an agent's context rather than called as a tool. Sato Hub indexes 565 crypto-relevant ones as of 2026-10-19 from 2 public registries and re-scans weekly, recording a changed file hash.
- What is a disclosure, and what is it not?
- A static pattern scan of the skill's own files: hosts it contacts, whether it generates keys, whether it asks for a credential, whether it pipes the internet into a shell, what tools it grants. It describes. It is never a verdict, and no flag is not a clearance.
- Which disclosures come up most?
- Generates or handles private keys (163), Schedules itself to run repeatedly (41), Reads secret paths (~/.ssh, .env …) (38), Executes fetched or decoded code (27), Grants itself unrestricted tools (27) as of 2026-10-19. 235 of 565 skills carry at least one. A flag is not an accusation — a wallet skill that generates keys is doing its job.
- Does Sato Hub say a skill can be installed without risk?
- No, and it never will. Where a registry publishes its own scan verdict it is shown as that registry's, attributed. What is published here is what the text of the skill does, so you can decide before it reaches a wallet.
SourcesWhere the data comes fromShowHide
Sources — the skill format and the tool protocol
Cite this pagePlain text, APA or BibTeXShowHide
Cite this page
Sato Hub. "Sato Hub crypto agent skills." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skillsData last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.