Is endogen/xian-sdk-skill safe?

https://github.com/openclaw/skills/tree/main/skills/endogen/xian-sdk-skill

94
SAFE

This skill contains only educational documentation for the Xian blockchain Python SDK with no executable code or security risks. The installation behaved normally with only expected GitHub access for repository cloning.

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW Network access during installation -10 ▶

The skill installation process accessed GitHub repository for cloning, which is expected and legitimate behavior for skill installation from a public repository.

INFO Blockchain development documentation -5 ▶

This skill provides educational content about Xian blockchain development including wallet management, transactions, and smart contracts. While legitimate, users should exercise caution when following code examples with real cryptocurrency.