by 安全扫描
OpenClaw
安全
medium confidenceThis skill is largely what it claims (on‑chain balance checks and CCTX tracking) but it overpromises features (Dev Mentor/docs indexing) that are not implemented, and it sends queried addresses/hashes to third‑party RPC/LCD endpoints which you should be aware of.
评估建议
This script is a simple on‑chain querying tool. Before installing or running it:
- Understand that any wallet address or CCTX hash you supply will be sent to the hardcoded RPC/LCD endpoints (thirdweb, BlockPI, Blockstream, etc.); those third parties will see your queries. If privacy matters, run your own node or replace the endpoints in scripts/zeta_tool.py with trusted RPCs.
- The README/description mentions a 'Dev Mentor' and deployment/doc indexing features, but the provided code does not imp...详细分析 ▾
ℹ 用途与能力
The name/description promise: omnichain asset queries and CCTX tracking — is implemented by scripts/zeta_tool.py. However the SKILL.md and description also advertise a 'Dev Mentor' / zEVM contract deployment guide and docs index; those features are not implemented in the provided code (they appear as roadmap/future work). This is an overclaim but not evidence of malicious intent.
✓ 指令范围
Runtime instructions are limited to running the provided Python script with commands like balance, track, and nav. The script only performs network calls to listed RPC/LCD endpoints and does not read local files, environment variables, or other system state. It will, however, transmit wallet addresses and transaction hashes to external services (RPC endpoints and Blockstream/BlockPI LCD), which is expected for a chain-tracking utility but is privacy-relevant.
✓ 安装机制
No install spec; this is an instruction-only skill with one included Python script. Nothing is downloaded or written during installation by the skill itself.
✓ 凭证需求
The skill requires no environment variables or credentials and the code does not attempt to read secrets. There are no disproportionate credential requests.
✓ 持久化与权限
always is false and the skill does not request persistent or cross-skill configuration. It does not modify other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/12
Initial publish
● 无害
安装命令 点击复制
官方npx clawhub@latest install zetachain-helper
镜像加速npx clawhub@latest install zetachain-helper --registry https://cn.clawhub-mirror.com
技能文档
这是由 mango (ZetaChain Technical Ambassador) 开发的专属技能，旨在让 AI Agent 能够深度理解并操作 ZetaChain 全链生态。
🌟 核心功能
- Omnichain Status (全链状态): 实时查询 ZetaChain 及连接链（ETH, BSC, BTC）的资产平衡。
- CCTX Tracker (跨链追踪): 输入 Hash 即可追踪全链消息 (CCTX) 的实时进度。
- Dev Mentor (技术指导): 索引最新 zEVM 开发文档，一键生成部署脚本示例。
- Network Watch (网络监控): 监控 ZetaChain 主网及测试网的最新升级与提案。
🛠 快速开始
1. 查询地址全链资产
python scripts/zeta_tool.py balance
2. 追踪跨链交易 (CCTX)
python scripts/zeta_tool.py track
📅 项目规划 (Roadmap)
- [ ] Phase 1: 基础全链查询逻辑实现
- [ ] Phase 2: 集成 OpenRouter LLM 实现智能技术答疑
- [ ] Phase 3: 发布至 ClawHub 并开源至 GitHub
Created by mango - ZetaChain Technical Ambassador 2026
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制