← 返回 Skills 市场

Base Alpha Scanner

Name: Base Alpha Scanner
Author: a4205586

作者 a4205586 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

421

总下载

当前安装

版本数

在 OpenClaw 中安装

/install base-alpha-scanner

功能描述

Real-time Base chain alpha intelligence for ZHAO (CryptoZhaoX). Use when scanning Base memecoins for second-wave setups or early gem launches; checking GMGN...

使用说明 (SKILL.md)

Base Alpha Scanner

ZHAO's on-chain intelligence toolkit for Base chain. Data-first, no hype. Alert only on high-conviction setups.

Scripts

scan_base.py — Core on-chain scanner

python3 skills/base-alpha-scanner/scripts/scan_base.py --mode \x3Cmode> [addr]

Modes:

trending — Top Base tokens ranked by conviction score (1h)
new — Early launch scanner: 0–45min + 45min–3h windows
token \x3Caddr> — Deep dive on specific token (all timeframes)
holders \x3Caddr> — Holder distribution + concentration check
gmgn \x3Caddr> — GMGN smart money data (may need browser fallback)

scan_narrative.py — Narrative & platform scanner

python3 skills/base-alpha-scanner/scripts/scan_narrative.py --mode \x3Cmode>

Modes:

clanker — Latest Clanker token deployments on Base
bankr — Bankr.fun trending tokens (Farcaster-native)
virtual — VIRTUAL Protocol AI agent ecosystem
ai — Broad AI narrative scan across Base

Workflow

Standard market scan (run on demand or every 1–2h):

scan_base.py --mode trending → identify what's moving
For anything score ≥ 60: scan_base.py --mode token \x3Caddr> → deep dive
If AI narrative or Farcaster signals: scan_narrative.py --mode ai + clanker
Apply alert rules → ping ZHAO only if threshold met

Early launch scan (continuous background):

scan_base.py --mode new → check 0–45min window
Score ≥ 60 + clean signals → immediate check with token mode
Cross-reference with scan_narrative.py --mode clanker for Farcaster origin
If all checks pass → early gem ping

Holder distribution check:

scan_base.py --mode holders \x3Caddr>
Flag if top-5 > 40% supply or any single wallet > 15%
Cross with DexScreener buy/sell maker count to confirm real distribution

Alert Rules

Read references/alert-rules.md for full ruleset. Summary:

Immediate ping: Tier 1 only (vol spike + narrative + clean chart + liq > $100K)
Second-wave alert: 45min–3h old, sustained vol + holder growth, score ≥ 65
Early gem: \x3C45min, score ≥ 60, clean team, real momentum. Max 2–3/day
Mainstream (BTC/ETH/UNI): Key level breaks, on-chain flows, funding extremes

API Reference

See references/api-endpoints.md for all endpoints, field names, and data source details.

Key addresses:

VIRTUAL token (Base): 0x0b3e328455c4059EEb9e3f84b5543F74E24e7E1b
cbBTC (Base): 0xcbB7C0000aB88B473b1f5aFd9ef808440eed33Bf

Conviction Score (0–100)

Built into scan_base.py. Score ≥ 65 = alert candidate. Score \x3C 50 = ignore. Factors: 1h volume, liquidity, buy pressure ratio, age (45min–3h = peak), momentum, mcap.

GMGN Notes

GMGN often blocks direct API access. Fallback options:

Use browser tool to navigate https://gmgn.ai/base/token/\x3Caddr>
Take screenshot for ZHAO if needed
Check wallet history at https://gmgn.ai/base/address/\x3Cwallet>

Bankr Notes

No clean public API. Bankr alpha comes from Warpcast:

Channel: https://warpcast.com/~/channel/bankr
Use web_search for recent Bankr mentions + web_fetch on Warpcast casts
High signal: power users (>5K followers) buying via Bankr frame in \x3C30min of launch

安全使用建议

This package looks like a legitimate Base-chain scanner, but do not run it unreviewed. Specific points to consider before installing or executing: - Fix the path mismatch: SKILL.md references `skills/base-alpha-scanner/scripts/...` while files live under `scripts/...`; adjust invocation or file placement to avoid runtime errors. - The code references a Basescan API key (and includes a placeholder apikey param) but the skill does not declare required env vars; if you supply BASESCAN_API_KEY, treat it like any secret — store it securely and only provide least-privilege keys. - There is at least one apparent bug in scripts/scan_base.py (a variable named `tota` is used instead of `total`), which will raise an exception; review and test the scripts in a sandboxed environment and fix obvious typos before trusting outputs. - The scripts make outgoing HTTP requests to several third-party services (dexscreener, basescan, gmgn.ai, clanker.world, bankr.fun, api.virtuals.io). Ensure you are comfortable with network access and that any API keys you provide are appropriate for public API use. Expect that GMGN may require an interactive browser session and cookies — the skill suggests using a browser tool or screenshots for that data. - If you plan to run continuous/background scans, implement external orchestration (cron, service) and monitoring; the package contains standalone scripts only. - If you lack programming or ops expertise, ask for a code review from a trusted developer or run the scripts in an isolated VM/container first. The issues found look like sloppy engineering rather than deliberate misdirection, but sloppy code increases the risk of crashes and unexpected behavior.

功能分析

Type: OpenClaw Skill Name: base-alpha-scanner Version: 1.0.0 The skill bundle is classified as suspicious due to potential URL injection vulnerabilities in `scripts/scan_base.py` and `scripts/scan_narrative.py`, where user-controlled `addr` arguments are directly inserted into API URLs via f-strings without explicit URL encoding. Additionally, `SKILL.md` explicitly instructs the AI agent to utilize `browser`, `web_search`, and `web_fetch` tools for data retrieval, which, while intended for legitimate scraping, broadens the attack surface for prompt injection if the agent's input is not rigorously sanitized. There is no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or backdoor installation.

能力评估

ℹ Purpose & Capability

Name/description align with the included scripts: both scan on-chain data (DexScreener, Basescan, GMGN) and narrative sources (Clanker, Bankr, Virtual). The external endpoints called are appropriate for on-chain/narrative scanning. Minor mismatch: SKILL.md shows invocation paths like `python3 skills/base-alpha-scanner/scripts/scan_base.py` while the packaged files are at `scripts/scan_base.py` — this path inconsistency could break runtime invocation or cause confusion.

ℹ Instruction Scope

SKILL.md instructs running the included Python scripts and using browser/web_fetch for sites that require sessions (GMGN, Warpcast). Those instructions stay within the described scanning purpose. However SKILL.md suggests both on-demand and 'continuous background' operation; the package contains only standalone scripts (no daemon/service) — continuous behavior would require external orchestration. SKILL.md also references using the agent's browser tool and screenshots for GMGN, which is manual/interactive rather than autonomous.

✓ Install Mechanism

No install spec or remote downloads; the skill is instruction + included Python scripts only. That is low install risk (nothing is fetched or executed at install time).

ℹ Credentials

The code and references mention an optional BASESCAN_API_KEY and show an `apikey` placeholder in the Basescan URL; yet the skill declares no required env vars. Not declaring optional but used credentials is potentially confusing but not necessarily malicious. Aside from that, no unrelated secrets or unusual environment access are requested. The scripts make many outbound requests to public APIs (DexScreener, Basescan, GMGN, Clanker, Bankr, Virtual), which is consistent with the stated purpose.

✓ Persistence & Privilege

Flags show normal defaults (always: false, agent can invoke autonomously). The skill does not request permanent/always-on inclusion or modify other skills. It merely provides scripts for on-demand scanning.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install base-alpha-scanner
安装完成后，直接呼叫该 Skill 的名称或使用 /base-alpha-scanner 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

**Initial release of base-alpha-scanner: real-time on-chain intelligence toolkit for Base chain.** - Provides scripts to scan Base memecoins, new launches, holder distributions, and smart money flows. - Adds narrative/platform monitoring for Clanker, Bankr.fun, VIRTUAL Protocol, and AI trends. - Includes a conviction scoring system for automated alerting based on volume, liquidity, and momentum. - Outlines workflows for market scans, early launch detection, and holder analysis. - Documents alert rules and API endpoints for streamlined integration and use.

元数据

Slug base-alpha-scanner

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题