← Back to Skills Marketplace
Miraix Wallet Roast
by
richard7463
· GitHub ↗
· v1.0.1
· MIT-0
300
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install miraix-wallet-roast
Description
Use this skill when the user wants to analyze or roast a Solana wallet, score memecoin exposure, explain portfolio risks, generate rebalance ideas, draft a s...
Usage Guidance
This skill is coherent for performing Solana wallet audits, but it calls a third‑party API (app.miraix.fun) and will transmit the wallet address you provide. Do not paste private keys or other secrets into the chat. Treat any 'commands' returned by the API as potentially unsafe: review them carefully and never run them without understanding and verifying them. If privacy is a concern, verify the Miraix domain and privacy policy before use or prefer a locally-run analysis tool.
Capability Analysis
Type: OpenClaw Skill
Name: miraix-wallet-roast
Version: 1.0.1
The skill is classified as suspicious due to a potential shell injection vulnerability in the `SKILL.md` instructions. It directs the AI agent to execute a `curl` command against an external API (`https://app.miraix.fun/api/wallet-audit`) using a user-provided Solana wallet address as a direct parameter. While the intent appears to be a legitimate wallet analysis service, the pattern of constructing shell commands with unvalidated user input is a high-risk practice that could be exploited if the agent is tricked into processing a malicious payload as a wallet address.
Capability Assessment
Purpose & Capability
Name, description, and runtime instructions align: the skill analyzes Solana wallets by calling Miraix public endpoints. It does not request unrelated binaries, credentials, or config paths.
Instruction Scope
Instructions are concrete (POST to https://app.miraix.fun/api/wallet-audit and include share-image URL) and constrain output to the API result. Missing: an explicit warning not to accept or forward private keys or other secrets from users. The skill also instructs to keep any actions[].command verbatim — this is fine for reporting, but callers should be warned not to execute returned commands blindly.
Install Mechanism
Instruction-only skill with no install steps and no code files — nothing is written to disk by the skill itself.
Credentials
The skill requests no environment variables, credentials, or config paths. The external API call is proportionate to the claimed purpose of wallet analysis.
Persistence & Privilege
Does not request permanent presence or elevated privileges (always:false). No modification of other skills or system settings is indicated.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install miraix-wallet-roast - After installation, invoke the skill by name or use
/miraix-wallet-roast - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Always include share card URL in wallet analysis results
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Miraix Wallet Roast?
Use this skill when the user wants to analyze or roast a Solana wallet, score memecoin exposure, explain portfolio risks, generate rebalance ideas, draft a s... It is an AI Agent Skill for Claude Code / OpenClaw, with 300 downloads so far.
How do I install Miraix Wallet Roast?
Run "/install miraix-wallet-roast" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Miraix Wallet Roast free?
Yes, Miraix Wallet Roast is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Miraix Wallet Roast support?
Miraix Wallet Roast is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Miraix Wallet Roast?
It is built and maintained by richard7463 (@richard7463); the current version is v1.0.1.
More Skills