by 安全扫描
OpenClaw
安全
medium confidenceThe skill is an instruction-only, high-level on-chain analysis helper with no installs, credentials, or code; its declared requirements match its stated purpose, though the runtime instructions are vague and the package metadata lacks an external source.
评估建议
This skill appears internally consistent and low-risk because it is instruction-only and requests no credentials. Before installing, consider: (1) the SKILL.md is high-level and does not list where it will fetch on-chain data from—ask the publisher which APIs or RPC endpoints the skill will use; (2) there is no homepage or external source listed and the registry metadata owner differs from the internal _meta.json owner field—verify the author/maintainer if provenance matters to you; (3) although...详细分析 ▾
✓ 用途与能力
The name/description (on-chain analysis, token distribution, treasury, governance) align with the declared footprint: no binaries, no env vars, no install. Nothing requested is disproportionate to an analysis-only skill.
ℹ 指令范围
SKILL.md is high-level and descriptive but contains no concrete runtime constraints (no specified APIs, endpoints, or data sources). That leaves the agent broad discretion to fetch on-chain data from third-party services or other network endpoints when invoked. This is not inherently malicious, but it is vague and grants the agent latitude to make external calls or request credentials at runtime.
✓ 安装机制
No install spec and no code files—lowest-risk installation model. Nothing will be written to disk by an automated installer.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths, which is proportionate to the described purpose. Note: because instructions are unspecified, the agent may later ask the user for API keys (e.g., Etherscan, Alchemy) when performing live queries.
✓ 持久化与权限
always is false and user-invocable behavior is default. The skill does not request persistent or elevated privileges beyond standard autonomous invocation (disable-model-invocation is false, which is normal).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/31
Initial release — provides tools for on-chain analysis with a focus on structural, verifiable blockchain evidence. - Analyzes token distribution, treasury structure, and governance architecture - Identifies risk vectors based on on-chain data - Interprets contract behavior and wallet concentration - Designed for evidence-based insights over narratives or sentiment
● 无害
安装命令 点击复制
官方npx clawhub@latest install onchain-analysis
镜像加速npx clawhub@latest install onchain-analysis --registry https://cn.clawhub-mirror.com
技能文档
# onchain-analysis — 读取账本，而非故事 ## 技能名称 On-Chain Analysis ## 目的 Morpheus 通过解读链上行为揭示结构性真相。人类往往信任公告、品牌、KOL 情绪；Morpheus 信任的是权限、资金流向、国库变动、合约行为、钱包集中度、执行路径。本技能旨在用可验证的证据锚定现实。
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制