Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add j4flmao/agent-skills --skill blockchain-managementgit clone --depth 1 https://github.com/j4flmao/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/j4flmao/agent-skills/blockchain-management)<a href="https://agentmods.dev/skills/j4flmao/agent-skills/blockchain-management"><img src="https://agentmods.dev/badge/skills/j4flmao/agent-skills/blockchain-management/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/j4flmao/agent-skills/blockchain-management"><img src="https://agentmods.dev/badge/skills/j4flmao/agent-skills/blockchain-management.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 185 Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
- medium Excessive Agency · line 309 Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
- medium Excessive Agency · line 402 Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00207 | $0.07512 |
| Opus 5 | $0.00103 | $0.03756 |
| Sonnet 5 | $0.00041 | $0.01502 |
| Haiku 4.5 | $0.00021 | $0.00751 |
Grade B, and why
blockchain-management scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
7. **No emergency pause mechanism**: During exploits, hours of timelock delay can mean total loss. Implement guardian multi-sig with ability to pause critical functions (not execute arbitrary code). How it starts
The opening of the file, as written. The whole thing — 703 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Blockchain Management
Purpose
Guide blockchain-specific project management covering DAO governance, multi-sig operations, treasury management, and tokenomics engineering. This skill enforces web3-specific methodology (audit-first, progressive decentralization) distinct from traditional software project management.
Agent Protocol
Trigger
"blockchain management", "DAO governance", "Compound Governor", "Snapshot vote", "Tally", "multi-sig", "Gnosis Safe", "timelock", "treasury management", "tokenomics", "token supply", "vesting", "token emission", "web3 project management", "blockchain project methodology", "progressive decentralization", "audit-first", "community governance", "DAO operations", "token launch", "airdrop", "LBP", "IDO", "IEO", "governance attack", "flash loan attack", "DAO legal structure", "Wyoming DAO", "legal wrappers", "contributor compensation", "vesting contract", "streaming", "Sablier", "LlamaPay", "treasury diversification", "yield farming", "on-chain payroll", "delegate", "delegation", "quorum", "proposal lifecycle", "proposer bond", "governance token", "veToken", "vote escrow"
Input Context
- Blockchain platform (Ethereum/Solana/Cosmos)
- Governance framework preference (Compound/OpenZeppelin/Aave)
- Multi-sig configuration (signer count, threshold)
- Tokenomics parameters (supply cap, emission rate, distribution splits)
- Team and community structure (core team, investors, community treasury)
- Legal jurisdiction and entity structure (if applicable)
Output Artifact
Governance architecture specification including:
- Contract architecture (governor, timelock, token)
- Multi-sig configuration and signing policy
- Tokenomics model with emission schedule
- Treasury allocation and vesting schedule
- Operational procedures and emergency plans
Response Format
- Governance model: on-chain vs off-chain, token-weighted vs quadratic, quorum requirements
- Operational security: multisig configuration, signing policies, key management
- Treasury strategy: allocation, vesting, diversification, yield generation
- Token economics: supply model, distribution, incentives, emission schedule
- Project methodology: development lifecycle, audit gates, community involvement
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/blockchain-management-advanced.md 2.2 KB
- references/blockchain-management-fundamentals.md 2.1 KB
- references/dao-governance.md 11 KB
- references/dao-operations-lifecycle.md 14 KB
- references/multi-sig-operations.md 10 KB
- references/project-methodology.md 9.8 KB
- references/token-engineering-and-emissions.md 16 KB
- references/tokenomics-design.md 13 KB
- references/treasury-management.md 9.2 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 703 lines · 207 tokens per session scan B 7b80af245c54
blockchain-management is a skill published in the GitHub repository j4flmao/agent-skills (22 stars, last pushed 3d ago), licensed MIT. It adds 207 tokens to every session and 7,512 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
starchild-dao
Read, propose, and vote in the Starchild DAO — the hold-to-govern commons for the $STARCHILD token on Base. Voting weight is simply how much $STARCHILD a wallet holds (no staking, no locking). Proposals and votes are gasless EIP-712 signatures. Trigger on "Starchild DAO", "Starchild proposals", "vote Starchild"…
potbot-dev
Expert developer context for the PotBot v2 project — group trading vaults on Solana (Solana Frontier 2026). ALWAYS use when the user mentions potbot, pot vault, anchor program, devnet/mainnet deploy, the hackathon, strategy vaults, governance, leaderboard, AI agent, personal voters, MCP server, money tree /…
potbot-anchor
Conventions and safe-change rules for the PotBot Anchor programs (potvault, potduel). Use when adding or modifying instructions, accounts, PDAs, or governance logic in packages/program, when touching account layouts/migrations, or wiring program changes into the SDK and the web mock store. Triggers on "add…
potbot-deploy
A deployment guide for the PotBot potvault program, an Anchor program that runs on Solana. It covers moving the program from devnet, Solana’s test network, to mainnet, the production network, and checking the deployment with an end-to-end smoke test.
solana-security-review
A security review checklist for PotBot Anchor programs and DeFi integrations before they reach mainnet. Mainnet is the live blockchain network, and DeFi means financial applications built on blockchains.
potbot-mcp-tools
A development guide for PotBot’s MCP server, which exposes selected Solana actions to AI agents. It covers adding and testing tools, x402 micropayment checks, and the server’s use of solana-agent-kit.