Check what a crypto agent skill does before installing it
onchain_agent_search_skillsUSE WHEN someone is about to install an agent skill and should know what it will touch first: keys, credentials, remote scripts, outbound hosts. Crypto-relevant agent skills from ClawHub and skills.sh, each with a static DISCLOSURE: hosts it contacts, whether it generates or handles private keys, whether it asks the user to paste a credential, whether it pipes a remote script into a shell, whether it grants itself unrestricted tools, whether it registers the agent with a third-party host, whether it schedules itself. Each flag carries evidence lines on the skill's page. NOT FOR finding frameworks, MCP servers or wallets (use onchain_agent_search_resources instead), an npm/pip/MCP install command (use onchain_agent_check_install), or one skill's Preflight verdict (use onchain_agent_preflight with skill).
RETURNS (json): { total, skills: [{ id, name, registry, canonical_url, installs, stars, disclosure_flags, hosts_contacted, declared_env, registry_scan, belongs_to_slug, skill_md_sha256, as_of }], note }.
A disclosure is a description, not a safety verdict — a wallet skill that generates keys is doing its job, and no flags is not a clearance. The registry's own scan status is attributed to the registry. slug is the directory listing a skill targets: a slug that matches no skill comes back empty, and says whether it is a directory listing (onchain_agent_get_resource reads it), a wiki page or Sato Hub's own planner. Read-only. Cite https://satohub.ai/skills.
Examples:
"solana skills that don't touch keys" -> { query: "solana" } then filter disclosure_flags
"which skills phone home" -> { flag: "registers_with_third_party" }
"skills for Coinbase AgentKit" -> { slug: "coinbase-agentkit" }
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| flag | No | Only skills carrying this disclosure flag: pipes_remote_to_shell, executes_fetched_code, generates_or_handles_keys, solicits_credentials, reads_secret_paths, broad_tool_grant, registers_with_third_party, schedules_persistence. | |
| slug | No | Only skills that target this directory listing. | |
| limit | No | ||
| query | No | Free text over skill name, description, owner/repo and hosts contacted. | |
| registry | No | Restrict to one registry. | |
| response_format | No | Text format; structuredContent is JSON either way. | markdown |