by 安全扫描
OpenClaw
安全
high confidenceThe skill's requests and runtime instructions are consistent with a Solidity development helper: it asks for no credentials, has no install actions, and its steps stay within the stated purpose.
评估建议
This skill is coherent and low-risk: it provides step-by-step guidance for writing and testing Solidity contracts and does not request secrets or install code. Before using it, verify the publisher (metadata shows inconsistent owner strings), and be aware that the agent may attempt to run local tooling (Hardhat/Foundry/Slither) if available — the skill will not itself install those tools. Never provide private keys, mnemonics, or RPC credentials to the agent; review any generated deployment comm...详细分析 ▾
✓ 用途与能力
Name, description, and instructions align: the skill is an instruction-only Solidity development helper that focuses on secure patterns, tests, and validation. It does not request unrelated binaries, credentials, or system paths.
✓ 指令范围
SKILL.md directives (clarify requirements, use OpenZeppelin, implement access control, write tests, run compile/test/static checks) stay within the stated purpose. The instructions do mention running tools (forge, hardhat, slither) but do not ask the agent to read unrelated files, exfiltrate secrets, or perform operations outside normal dev/test/build workflows.
✓ 安装机制
No install spec and no code files — instruction-only skill. This is the lowest-risk install posture; the skill will rely on existing tooling in the agent environment rather than downloading or extracting code.
✓ 凭证需求
No required environment variables, credentials, or config paths are declared. Safety rules explicitly prohibit embedding private keys or RPC secrets. The lack of requested secrets is proportionate to the stated functionality.
✓ 持久化与权限
always:false and no config-path writes are declared. The skill does not request permanent presence or elevated privileges beyond normal autonomous invocation (the platform default).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/24
Initial release summary: Provides a secure, structured workflow for developing, testing, and validating Solidity smart contracts. - Implements security-first best practices and explicit safety patterns (access control, pausable, reentrancy protection). - Supports ERC-20, ERC-721, ERC-1155, and custom contract types with proven library selection. - Includes test scaffolding and validation steps using Hardhat or Foundry. - Requires explicit user approval for mainnet deployments and enforces best-practice safety rules. - Generates contract sources, tests, build/validation commands, and security notes for each contract.
● Pending
安装命令
点击复制官方npx clawhub@latest install axodus-solidity-dev
镜像加速npx clawhub@latest install axodus-solidity-dev --registry https://cn.longxiaskill.com