← 返回 Skills 市场

Bitget Poolx Monitor

Name: Bitget Poolx Monitor
Author: itonlyforfun-ai

作者 itonlyforfun-AI · GitHub ↗ · v1.1.0

cross-platform ⚠ suspicious

329

总下载

当前安装

版本数

在 OpenClaw 中安装

/install bitget-poolx-monitor

功能描述

Monitor Bitget PoolX for new staking projects using r.jina.ai to bypass Cloudflare. Detect ETH, BTC, SOL and other pool launches.

使用说明 (SKILL.md)

Bitget PoolX Monitor

Monitor Bitget PoolX for new staking project launches.

Features

Uses r.jina.ai to bypass Cloudflare protection
Fast and reliable (no Playwright needed)
Detects new staking pools (ETH, BTC, SOL, etc.)
Automatic notification support

Usage

Command Line

curl -s "https://r.jina.ai/https://www.bitget.com/events/poolx"

Python

import requests

def check_poolx():
    url = "https://r.jina.ai/https://www.bitget.com/events/poolx"
    content = requests.get(url).text
    
    if "Ongoing" in content:
        # Check for new pools
        return "Has active pools"
    return "No pools"

Output Example

Ongoing (2)
- BTC Pool: 2,473 BTC, APR 2.74%
- ETH Pool: 80,664 ETH, APR 7.33%

Monetization

This skill includes SkillPay integration:

Charge users per API call (0.001 USDT)
Check balance before execution
Payment link for deposits

Files

bitget-monitor.py - Main script using r.jina.ai
billing.py - SkillPay billing integration

安全使用建议

This skill is suspicious rather than clearly malicious. Before installing or running it: 1) Do not run the Python files on a production machine — run in an isolated environment if you want to inspect behavior. 2) Ask the author to explain why Playwright is included despite the README claiming it's unnecessary, and to either remove that code or add a proper install spec for Playwright and browsers. 3) Treat the hard-coded BILLING_API_KEY as sensitive: ask the author why a secret key is embedded, verify whether it's a test/demo key, and request that billing credentials be supplied via environment variables or handled by the platform rather than hard-coded. 4) Be aware the skill will make outbound HTTP requests to r.jina.ai, www.bitget.com and skillpay.me (including potential payment/charge operations). 5) Consider refusing installation or auditing network traffic until the above inconsistencies are resolved; if the embedded API key is real, consider requesting that it be revoked/rotated.

功能分析

Type: OpenClaw Skill Name: bitget-poolx-monitor Version: 1.1.0 The skill is a cryptocurrency monitoring tool designed to track staking projects on Bitget PoolX. It utilizes legitimate methods for web scraping, including the r.jina.ai reader and Playwright with standard anti-bot evasion techniques (bitget-monitor.py, bitget-final.py). While it includes a hardcoded API key for its monetization service (billing.py), this is a developer-side security flaw rather than a threat to the user, and the billing functionality is clearly disclosed in the documentation (SKILL.md).

能力评估

⚠ Purpose & Capability

SKILL.md and main examples use r.jina.ai to fetch Bitget PoolX (consistent). However the repo also contains bitget-final.py which uses Playwright and stealth tricks to fetch the same site; this contradicts the README claim 'no Playwright needed' and introduces a heavy dependency not declared in metadata.

⚠ Instruction Scope

SKILL.md only instructs lightweight HTTP fetches to r.jina.ai/bitget.com and shows a simple requests example. The included Python files, however, perform additional network operations (calls to skillpay.me) and a headful/headless browser flow that may load different content. The instructions do not document these extra behaviors or when the Playwright path is used.

ℹ Install Mechanism

There is no install spec (instruction-only) which is low-risk in isolation, but the presence of Playwright-based code implies a large dependency that is not declared. If someone runs the Playwright script, they will need to install Playwright and browsers — this mismatch is a packaging/information gap.

⚠ Credentials

No required env vars are declared, yet billing.py contains a hard-coded BILLING_API_KEY and SKILL_ID. Hard-coded secret-like values in distributed code are a red flag: they may allow the author (or anyone with the key) to charge or query balances, and the skill performs network calls to an external billing endpoint (skillpay.me) without disclosing required credentials.

✓ Persistence & Privilege

The skill does not request always:true, no special OS restrictions, and does not declare config paths. It does not attempt to modify other skills or agent-wide settings in the provided files.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install bitget-poolx-monitor
安装完成后，直接呼叫该 Skill 的名称或使用 /bitget-poolx-monitor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.1.0

**Cloudflare bypass improved with r.jina.ai** - Switched to using r.jina.ai for Cloudflare bypass—no Playwright required - Faster and more reliable monitoring of Bitget PoolX staking projects - Updated main script to bitget-monitor.py - Tag "jina" added, and usage examples revised for simplicity - Documentation and output examples updated accordingly

v1.0.0

Bitget PoolX Monitor 1.0.0 - Initial release. - Monitors Bitget PoolX and detects new staking project launches (ETH, BTC, SOL, etc.). - Bypasses Cloudflare automatically using Playwright. - Provides real-time status checks every 15 minutes. - Sends Telegram notifications when new pools go live. - Integrates SkillPay for per-call monetization and balance management.

元数据

Slug bitget-poolx-monitor

版本 1.1.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 2

常见问题