xena-protocolXena Protocol — scan your Gmail for phishing, crypto scams, impersonation, and BEC. Optionally submit hashed reports to an on-chain registry on Ethereum Sepo...
Install via ClawdBot CLI:
clawdbot install nickvanzo/xena-protocolGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
Report → https://sepolia.etherscan.io/tx/<tx_hashCalls external URL not in known-safe list
https://github.com/NickVanzo/royal-hackathon-ituUses known external API (expected, informational)
slack.comAI Analysis
The skill sends user email data to external AI and blockchain services, which is consistent with its stated purpose but creates privacy exposure. The transaction authorization policy is strict and well-defined, preventing arbitrary fund transfers, but the reliance on external scripts and GitHub repositories introduces supply-chain risk.
Generated May 6, 2026
An individual scans their Gmail inbox for phishing, scam, and impersonation emails. The skill flags suspicious messages and educates the user on avoiding threats.
A small business owner monitors their company Gmail for business email compromise (BEC) and crypto scams. The skill provides alerts and optionally shares threat data with others.
A crypto enthusiast uses the skill to detect crypto scams and phishing attempts targeting their wallet, with optional on-chain reporting to warn the community.
An IT security team deploys the skill across multiple Gmail accounts to centralize phishing detection and share threat intelligence via the on-chain registry.
Basic watcher mode is free. Reporter mode, which includes on-chain reporting and shared threat intelligence, is offered as a paid subscription or one-time fee.
Businesses pay for multi-user deployments with advanced reporting, custom alerts, and integration support.
Users stake tokens to participate in reporting and earn rewards for accurate reports. Data is sold to cybersecurity firms or used for premium insights.
💬 Integration Tip
Start by running the doctor command to check prerequisites; the interactive setup wizard guides users through each step, so no prior crypto or API knowledge is needed.
Scored May 6, 2026
Audited Apr 19, 2026 · audit v1.0
当用户发起任意旅行相关问询时，包含但不限于：预订酒店、机票查询、火车票查询、景点推荐、寻找当地特色玩乐、目的地查询、行程规划、美食住宿攻略、签证、查询旅游攻略、获取旅行建议等场景，自动触发此技能。当用户需要操作携程、Ctrip、携程问道时使用此skill。
Manage aibtc-worker automation tasks. Use this skill when the user wants to start, stop, or check the status of the aibtc worker. Triggers include: "aibtc ru...
Track AI token usage and costs across providers. Import sessions, view dashboard, costs breakdown, and compare Max plan savings.
Maintain your agent on-chain identity (ERC-8004) on BNB Chain. Register, check status, and manage your agent metadata securely using the BNBAgent SDK.
Use when the user asks to wire XRPL x402 pay-per-call or prepaid credits, hand off a stuck 402/settle flow to a human, draft an agent SOP for Ripple/t54-style facilitators, or package last-mile docs for XRPL agent payments without building a backend.
Query OpenSea NFT marketplace data via official MCP server. Get floor prices, trending collections, token prices, wallet balances, swap quotes, and NFT holdings. Supports Ethereum, Base, Polygon, Solana, and other major chains. Requires OpenSea developer account for MCP token.