📦 Meme Signal Scanner — 梗币信号扫描
v1.0.0免费聚合 DEXScreener、Pump.fun、GeckoTerminal 与 CoinGecko 热门数据，为代币 0-100 打分并给出风险评估，助你快速捕捉链上梗币信号。
3· 806·2 当前·2 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill mostly does what it says: it polls public crypto APIs and scores tokens. However, before installing, ask the author to clarify two things: (1) Where and how are "strong signals" reported to the creator (what endpoint or channel), and will any credentials or webhooks be needed? (2) What does 'Powered by Lobster Signal API' mean — is data sent to an external service, and if so, what data is transmitted and retained? Also confirm how the 5‑minute polling is implemented (agent-internal sc...详细分析 ▾
ℹ 用途与能力
Name/description match the instructions: it polls public crypto analytics endpoints and scores tokens. No unexpected binaries, installs, or credentials are requested, which is proportionate to the stated purpose.
⚠ 指令范围
Instructions are explicit about fetching public APIs and scoring, but they also say 'Report strong signals to creator' and 'Built by/Powered by Lobster Signal API' without specifying how reports are delivered or what external endpoint is used. The workflow also prescribes a 5-minute polling schedule and 24h in-memory retention — acceptable technically but the spec doesn't declare how periodic execution or outbound reporting will actually occur.
✓ 安装机制
Instruction-only skill with no install steps or external downloads. This is the lowest-risk install model and consistent with the content.
⚠ 凭证需求
The skill requests no environment variables or credentials, yet claims a 'Lobster Signal API' and asks to report signals to the creator. If an external push/report mechanism is intended, credentials or a webhook URL would normally be required; their absence is unexplained and could hide implicit exfiltration instructions embedded elsewhere at runtime.
ℹ 持久化与权限
Registry-level flags show no forced always-on privilege. The SKILL.md contains 'auto-activate: true' and multiple triggers — this suggests the skill may try to auto-activate when matching queries, but it does not request system-level persistence or platform-wide overrides. Clarify whether 'auto-activate' is enforced by the platform or only informational.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/20
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install meme-signal
镜像加速npx clawhub@latest install meme-signal --registry https://cn.longxiaskill.com镜像同步中