← 返回 Skills 市场
harrylabsj

Crypto Win Humility Check

作者 haidong · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
70
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install crypto-win-humility-check
功能描述
A reflection skill that helps users process a win without overconfidence or lifestyle inflation. Use after a successful trade or investment gain. Prompt-only.
使用说明 (SKILL.md)

crypto-win-humility-check

A reflection skill that helps users process a win without overconfidence or lifestyle inflation.

Workflow

  1. Ask what happened: position, timing, what the gain means in real life.
  2. Separate the outcome from the decision process: skill, luck, or both?
  3. Identify what would have to be true for this to repeat consistently.
  4. Surface any urge to increase position size, trade more, or change lifestyle based on the win.
  5. Generate a humility anchor: a written rule or check that keeps perspective.

Output Format

  • What happened (facts)
  • Skill vs. luck breakdown
  • Conditions for repetition
  • Warning signs of overconfidence
  • Humility anchor rule

Quality Bar

  • Celebrates the win without dismissing it.
  • Prevents the common pattern of one win leading to over-leveraging or over-trading.
  • Grounds the gain in real life context, not percentage terms alone.

Edge Cases

  • If the gain was large enough to materially change the user's life, suggest they take time before making any financial decisions.
  • If the user wants to immediately increase their crypto allocation, strongly flag this impulse.

Compatibility

  • Prompt-only, works best immediately after a realized gain.
  • Strong complement to the review ritual and portfolio risk sensemaker.
安全使用建议
This skill's functionality (a short reflective prompt) is simple and benign in description, but the included handler.py reads a hard-coded path under /Users/jianghaidong/.openclaw/skills/... which is unexpected and could expose local files. Treat this as suspicious: ask the author why the code reads that path (it looks like a developer leftover), request removal of hard-coded home paths or replacement with safe relative paths, and inspect or run the code in a sandbox before installing. If you cannot verify the author, avoid installing in an environment with sensitive files or credentials. If you want to proceed, ask for a version with the file-read removed or clearly documented and justified.
功能分析
Type: OpenClaw Skill Name: crypto-win-humility-check Version: 1.0.0 The skill contains a significant vulnerability in handler.py, where the _load_skill_meta function uses a hardcoded absolute path (/Users/jianghaidong/.openclaw/skills/) and performs unsanitized string formatting with the skill_name argument. This pattern facilitates path traversal, allowing an attacker to potentially probe the local filesystem, although the current implementation discards the file content after reading it. The presence of a specific local user's home directory suggests either poor development practices or environment-specific targeting.
能力标签
crypto
能力评估
Purpose & Capability
The skill is described as prompt-only reflection work; it should not need to read local files. Yet handler.py attempts to open /Users/jianghaidong/.openclaw/skills/{skill_name}/SKILL.md — a user-specific filesystem path unrelated to the described capability. This is disproportionate and unexpected.
Instruction Scope
SKILL.md contains only prompt/instructional content and does not instruct reading any local files or accessing user-specific paths. The runtime code contradicts the SKILL.md by reading a local SKILL.md file, which is scope creep.
Install Mechanism
No install specification is present (instruction-only). Nothing would be downloaded or written to disk by an installer, which is appropriate for a prompt-only skill.
Credentials
The skill declares no environment variables or credentials, but the code accesses a hard-coded local config path under a specific user's home directory. That gives the skill potential access to local files/configuration not justified by its stated purpose.
Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence, and the handler does not modify other skills or global configuration.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install crypto-win-humility-check
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /crypto-win-humility-check 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of crypto-win-humility-check skill: - Provides structured reflection after a successful crypto trade or investment gain. - Guides users to separate skill vs. luck and avoid overconfidence or lifestyle inflation. - Surfaces urges to over-trade or change lifestyle, and generates a personal humility anchor. - Includes safeguards for large gains and impulses to increase allocation. - Designed as a prompt-only tool for immediate post-gain use.
元数据
Slug crypto-win-humility-check
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Crypto Win Humility Check 是什么?

A reflection skill that helps users process a win without overconfidence or lifestyle inflation. Use after a successful trade or investment gain. Prompt-only. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 70 次。

如何安装 Crypto Win Humility Check?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-win-humility-check」即可一键安装,无需额外配置。

Crypto Win Humility Check 是免费的吗?

是的,Crypto Win Humility Check 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Crypto Win Humility Check 支持哪些平台?

Crypto Win Humility Check 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Crypto Win Humility Check?

由 haidong(@harrylabsj)开发并维护,当前版本 v1.0.0。

💬 留言讨论