← 返回 Skills 市场

Cardano Balances

Name: Cardano Balances
Author: adacapo21

作者 Angelos Kappos · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

305

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cardano-balances

功能描述

Query wallet balances, addresses, and UTxOs on the Cardano blockchain.

使用说明 (SKILL.md)

Cardano Wallet Balances

Query wallet balances, addresses, and UTxOs on the Cardano blockchain.

Prerequisites

@indigoprotocol/cardano-mcp server running

MCP Tools

get_balances — Retrieve all balances and native assets for the connected wallet
get_addresses — Retrieve all Cardano addresses for the connected wallet
get_utxos — Retrieve all UTxOs for the connected wallet

When to use

Use this skill when the user asks about:

Wallet balances or ADA amount
Native tokens or assets in their wallet
Wallet addresses
UTxO details or UTXO inspection

Data interpretation

Balances are returned in lovelace (1 ADA = 1,000,000 lovelace). Always convert to ADA for display.
Native assets are identified by policyId + nameHex.
The name field provides a human-readable label when available.

安全使用建议

Do not provide your wallet seed phrase unless you fully trust the skill and its publisher. Ask the maintainer why a SEED_PHRASE is required instead of a watch-only address or xpub. Before installing: (1) verify the npm package @indigoprotocol/cardano-mcp on the registry and inspect its repository/source and maintainer history, (2) prefer providing only public addresses or watch-only credentials when possible, (3) if you must test, use an empty/spare wallet with no funds, and (4) avoid storing your real seed phrase in environment variables for third-party skills.

功能分析

Type: OpenClaw Skill Name: cardano-balances Version: 1.0.0 The skill bundle is designed to query Cardano blockchain balances and UTxOs using the @indigoprotocol/cardano-mcp package. While it requires a sensitive SEED_PHRASE environment variable to derive wallet information, the code and instructions in SKILL.md and sub-skills/check-balances.md are consistent with the stated purpose and show no signs of data exfiltration, malicious execution, or prompt injection.

能力评估

ℹ Purpose & Capability

The skill's functionality (getting balances, addresses, UTxOs) generally aligns with its name and description and the referenced MCP tools. However, requiring a SEED_PHRASE is stronger than normally necessary for read-only balance queries (which can often be done from public addresses or xpub/watch-only data). The SKILL.md does not justify why a full seed phrase is required.

⚠ Instruction Scope

The runtime instructions reference only the MCP tools (get_balances, get_addresses, get_utxos) and conversion/display guidance, which is within scope. But SKILL.md does not say how the declared SEED_PHRASE env var is used, stored, or protected. The allowed-tools list (Read, Glob, Grep) could let the skill read local files, yet the instructions never limit or explain use of local data. This ambiguity increases risk because a seed phrase could be accessed/exfiltrated without being explicitly described.

ℹ Install Mechanism

Install is a node package: @indigoprotocol/cardano-mcp (npm). Installing an npm package is a common approach for Cardano tooling and is not unusual, but it is a moderate-risk install mechanism because it will place code on disk and execute from the registry. No homepage, repository link, or package version is provided in the metadata, making provenance harder to verify.

⚠ Credentials

The skill requires a single env var: SEED_PHRASE. A seed phrase is extremely sensitive (full wallet control). The skill does not request more unrelated credentials, but it also does not explain why the seed phrase is necessary versus less-privileged alternatives (e.g., public addresses, xpub, watch-only keys). Requiring a seed phrase for a read-only balances query is disproportionate unless the skill needs to derive private addresses not otherwise available — this should be explicitly stated and justified.

✓ Persistence & Privilege

The skill is not always-enabled, does not request system-wide config changes, and does not claim to modify other skills or agent settings. Autonomous invocation is allowed (the platform default) but is not combined with other high privileges here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cardano-balances
安装完成后，直接呼叫该 Skill 的名称或使用 /cardano-balances 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release

元数据

Slug cardano-balances

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题