⚠️Install with caution. This skill has very few installs. Always review the source and verify it on clawhub.ai before installing. Community-built skills run with agent permissions — only install ones you trust.

⛓️ Crypto & Web3

Xena Protocolv0.2.0

Name: Xena Protocol
Author: nickvanzo

xena-protocol

nickvanzo

Xena Protocol — scan your Gmail for phishing, crypto scams, impersonation, and BEC. Optionally submit hashed reports to an on-chain registry on Ethereum Sepo...

latest

Download Package View on ClawHub

Installs (all time)

Installs (current)

Downloads

592

Stars

CreatedApr 18, 2026

UpdatedMay 11, 2026

Install & Quick Start

Install via ClawdBot CLI:

clawdbot install nickvanzo/xena-protocol

Skill Package31 files

📋SKILL.mdmarkdown

Failed to load file.

Quality Score

B53/100

Grade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.

Market Validation4/35

· 115 downloads (low demand)
· No tracked installs (may still have real users via manual install)

Documentation20/25

· SKILL.md present
· Detailed documentation (≥3000 chars)
· Contains usage examples or trigger description
· Detailed summary

Package Completeness11/15

· skillAssets present (30 files)

Security Analysis

⚠️ Medium Risk

UNKNOWN_DATA_SINKhigh

Sends data to undocumented external endpoint (potential exfiltration)

Report → https://sepolia.etherscan.io/tx/<tx_hash

UNDOCUMENTED_EXTERNALlow

Calls external URL not in known-safe list

https://github.com/NickVanzo/royal-hackathon-itu

KNOWN_EXTERNALlow

Uses known external API (expected, informational)

slack.com

AI Analysis

The skill sends user email data to external AI and blockchain services, which is consistent with its stated purpose but creates privacy exposure. The transaction authorization policy is strict and well-defined, preventing arbitrary fund transfers, but the reliance on external scripts and GitHub repositories introduces supply-chain risk.

💡

Usage Guide

Generated May 6, 2026

Individual Gmail users concerned about phishingSmall business ownersCrypto investorsIT security professionalsbeginner

💡 Application Scenarios

Personal Email Security AuditPersonal Security

An individual scans their Gmail inbox for phishing, scam, and impersonation emails. The skill flags suspicious messages and educates the user on avoiding threats.

Small Business Anti-Phishing ProtectionSmall Business

A small business owner monitors their company Gmail for business email compromise (BEC) and crypto scams. The skill provides alerts and optionally shares threat data with others.

Crypto Investor Scam DetectionCryptocurrency

A crypto enthusiast uses the skill to detect crypto scams and phishing attempts targeting their wallet, with optional on-chain reporting to warn the community.

IT Security Team CollaborationIT Security

An IT security team deploys the skill across multiple Gmail accounts to centralize phishing detection and share threat intelligence via the on-chain registry.

💼 Business Models

Freemium with optional reporter subscriptionSubscription fees or one-time payments for reporter mode access.

Basic watcher mode is free. Reporter mode, which includes on-chain reporting and shared threat intelligence, is offered as a paid subscription or one-time fee.

Enterprise License for Security TeamsAnnual licensing fees based on number of users or mailboxes.

Businesses pay for multi-user deployments with advanced reporting, custom alerts, and integration support.

Community-Driven Threat Intelligence MarketplaceToken staking fees, data licensing, and marketplace commissions.

Users stake tokens to participate in reporting and earn rewards for accurate reports. Data is sold to cybersecurity firms or used for premium insights.

💬 Integration Tip

Start by running the doctor command to check prerequisites; the interactive setup wizard guides users through each step, so no prior crypto or API knowledge is needed.