← Back to Skills Marketplace
binance237a-hash

Solana Memecoin Guardian v2

by binance237a-hash · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
409
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install solana-memecoin-trade
Description
Autonomously discovers and trades Solana memecoins by copying smart wallets, analyzing markets, detecting social trends, and enforcing strict on-chain risk c...
Usage Guidance
This bundle is a coherent Solana trading bot and WILL need sensitive credentials to run live (a private key capable of signing transactions, Solana RPC URL, Helius and Jupiter API keys, and optionally an X/Twitter Bearer token). Before you run it: (1) Treat it as high-risk — do NOT put a main wallet private key here. Use an isolated test wallet with only a small amount of funds if you want to experiment. (2) Prefer paper mode for initial testing (no live transactions). (3) Review the code paths that call loadKeypair() and sendRawTransaction so you understand exactly when and how it can move funds. (4) Correct the metadata/manifest: the registry should declare the required env vars and primary credential so users are aware. (5) Consider alternatives to pasting an uncovered private key (hardware signer, signer service, or a wallet delegate with restricted allowances). (6) Run in a sandbox or isolated environment and audit network activity if you plan to run live. If you want, I can list the exact files/lines that read each env var and perform signing/network calls so you can audit those spots.
Capability Analysis
Type: OpenClaw Skill Name: solana-memecoin-trade Version: 1.0.0 The skill is designed for automated cryptocurrency trading, which inherently involves high-risk operations. It requires the user to provide their Solana wallet private key via environment variables (`WALLET_PRIVATE_KEY_BASE58` or `WALLET_PRIVATE_KEY_JSON`) for live trading, as detailed in `docs/live_setup.md` and implemented in `src/providers/swapExecutor.ts`. While this is necessary for its stated purpose of executing trades, the direct handling of private keys for automated financial transactions represents a significant security risk and potential vulnerability if the skill or its execution environment were compromised. There is no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or obfuscation, but the high-privilege financial capabilities warrant a 'suspicious' classification.
Capability Assessment
Purpose & Capability
The skill is a full-featured Solana trading bot (copy-trading, live swaps, RPC queries, X stream). That purpose legitimately requires SOLANA_RPC_URL, HELIUS_API_KEY, JUP_API_KEY and a WALLET_PRIVATE_KEY to perform live trades — but the registry metadata lists no required environment variables or primary credential. The metadata therefore underreports the skill's privileges and needed secrets.
Instruction Scope
SKILL.md and docs explicitly instruct how to run in paper or live mode and to place API keys and a wallet private key in .env. The runtime instructions (and the code) will: read local config files, poll external services (DexScreener, Jupiter, Helius, Solana RPC, X/Twitter), and sign/send transactions when in live mode. All of that is consistent with the described trading purpose; there is no obvious out-of-scope file-reading or hidden exfiltration to unexpected endpoints.
Install Mechanism
No install spec was provided in the registry, but the bundle contains a full Node/TypeScript project and package.json. Running it requires npm install / tsx (dependencies are normal for Solana tooling). The mismatch (registry says instruction-only while code files exist) is an integrity/packaging concern but not an outright malicious install mechanism.
Credentials
Live operation requires high‑privilege secrets: WALLET_PRIVATE_KEY_BASE58 or WALLET_PRIVATE_KEY_JSON (used to sign and send transactions), SOLANA_RPC_URL (node access), HELIUS_API_KEY (wallet event streaming), JUP_API_KEY (Jupiter), and optionally X_BEARER_TOKEN. These are proportionate to a live trading bot, but the registry metadata omitted declaring any required envs/primary credential — that omission increases risk because users may not realize they must supply a private key. Supplying a private key gives the skill full control over funds in that wallet.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not persist tokens into other skills. It reads local config files and may write nothing persistent; autonomy (agent-invocation) is allowed by default but is not unusual for skills. No system-wide privilege escalation was observed.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install solana-memecoin-trade
  3. After installation, invoke the skill by name or use /solana-memecoin-trade
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Solana Memecoin Guardian v2 Solana Memecoin Guardian v2 is an autonomous trading skill designed to discover and trade Solana memecoins while minimizing downside risk. The system combines multiple intelligence layers, including smart-wallet copy trading, AI-driven market analysis, on-chain risk validation, and social narrative detection. The engine continuously monitors the Solana ecosystem through sources such as Pump.fun, DexScreener, and on-chain wallet activity. It selectively follows high-performing smart wallets while also generating independent trade signals using rule-based AI analysis of liquidity stability, transaction flow, volatility patterns, and market structure. In addition to market data, the system integrates a Narrative Engine that monitors viral trends and influential posts on platforms such as X (Twitter). When strong narratives emerge, the engine identifies relevant tokens and boosts them as potential candidates for analysis. However, narrative signals alone never trigger trades; every opportunity must still pass strict on-chain safety checks. A unified Risk Gate protects the strategy from common memecoin threats such as rug pulls, excessive holder concentration, unstable liquidity, or abnormal trading behavior. Position sizing, portfolio exposure, and daily loss limits are strictly controlled to ensure capital preservation. The architecture includes several core components: • Smart Wallet Copy-Trade Engine • AI Analysis Engine • Narrative Detection Engine (X / social signals) • Shared Risk Gate and On-Chain Safety Checks • Position Manager with TP/SL and Trailing Stops • Rug Alarm System for emergency exits • Risk Budget Orchestrator for capital protection By combining on-chain intelligence, social trend awareness, and strict risk management, Solana Memecoin Guardian v2 aims to capture high-probability opportunities while avoiding the majority of unsafe or manipulative tokens. Primary philosophy: Missing 100 pumps is acceptable. Surviving one rug is mandatory.
Metadata
Slug solana-memecoin-trade
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Solana Memecoin Guardian v2?

Autonomously discovers and trades Solana memecoins by copying smart wallets, analyzing markets, detecting social trends, and enforcing strict on-chain risk c... It is an AI Agent Skill for Claude Code / OpenClaw, with 409 downloads so far.

How do I install Solana Memecoin Guardian v2?

Run "/install solana-memecoin-trade" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Solana Memecoin Guardian v2 free?

Yes, Solana Memecoin Guardian v2 is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Solana Memecoin Guardian v2 support?

Solana Memecoin Guardian v2 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Solana Memecoin Guardian v2?

It is built and maintained by binance237a-hash (@binance237a-hash); the current version is v1.0.0.

💬 Comments