← 返回 Skills 市场

DeFi Yield Monitor

Name: DeFi Yield Monitor
Author: reed1898

作者 Reed · GitHub ↗ · v1.1.0

cross-platform ⚠ suspicious

439

总下载

当前安装

版本数

在 OpenClaw 中安装

/install defi-yield-monitor

功能描述

Monitor DeFi lending and savings positions across Aave v3, SparkLend, Spark Savings, and Kamino with balances, APYs, health factors, and yield tracking.

使用说明 (SKILL.md)

DeFi Yield Monitor

Self-contained skill for cross-chain DeFi position & yield monitoring. All data from public endpoints — no API keys needed.

First-Time Setup

Run the setup script to clone the project, create venv, and init config:

bash \x3Cskill_dir>/scripts/setup.sh

Then edit the config with wallet addresses:

$EDITOR ~/.openclaw/workspace/projects/defi-yield-monitor/config/config.json

Config Template

{
  "wallets": {
    "evm": ["0xYourEthWallet"],
    "solana": ["YourSolanaWallet"]
  },
  "protocols": [
    { "chain": "eth", "name": "aave" },
    { "chain": "bsc", "name": "aave" },
    { "chain": "eth", "name": "spark" },
    { "chain": "eth", "name": "spark_savings" },
    { "chain": "solana", "name": "kamino" }
  ],
  "thresholds": {
    "min_health_factor": 1.25,
    "max_daily_drawdown_pct": 5
  }
}

Remove protocols you don't use. Only include chains where you have positions.

Commands

Use the run script (auto-detects proxy):

# Daily report — positions + risk alerts
bash \x3Cskill_dir>/scripts/run.sh --text

# Yield summary — 7d/30d PnL + per-protocol APY
bash \x3Cskill_dir>/scripts/run.sh --yield-summary

# JSON output — for programmatic use
bash \x3Cskill_dir>/scripts/run.sh --json

Or run directly:

cd ~/.openclaw/workspace/projects/defi-yield-monitor
.venv/bin/python main.py --config config/config.json --yield-summary

Automated Daily Reports

Create an OpenClaw cron job to collect snapshots and report yields:

Schedule: twice daily (e.g. 13 9,21 * * *)
Command: bash \x3Cskill_dir>/scripts/run.sh --yield-summary
Delivery: announce to user's Telegram/Discord

After 7 days of snapshots, --yield-summary shows actual realized returns (not just APY estimates).

Supported Protocols

Protocol	Chains	What It Tracks
Aave v3	ETH, BSC	Supply/borrow, APY, health factor
SparkLend	ETH, Base	Supply/borrow, health factor
Spark Savings	ETH	spUSDC/spUSDT/sUSDS vault yields
Kamino	Solana	Lending obligations, APY

Output Fields

Per position: chain, protocol, wallet, supplied_usd, borrowed_usd, net_value_usd, apy_supply, apy_borrow, health_factor
Yield summary: current APY per protocol, 7d/30d PnL (absolute + %), annualized APY from actual returns
Risk alerts: health factor below threshold, daily drawdown exceeding limit

Proxy

The run script auto-detects QuickQ/Clash/V2Ray proxies. To set manually:

export https_proxy=http://127.0.0.1:10020
export http_proxy=http://127.0.0.1:10020

Source

https://github.com/reed1898/defi-yield-monitor

安全使用建议

This skill is suspicious rather than clearly benign because the package omits the main runtime and instead fetches code from a GitHub repo at setup time. Before installing or running it: 1) Review the remote repository (https://github.com/reed1898/defi-yield-monitor) and its main.py to confirm exactly what network calls, webhooks, and data accesses it performs. 2) Check config.example.json to see if it expects Telegram/Discord tokens or other secrets; do not paste private keys or API tokens until you verify how they are stored and used. 3) Consider running the setup and the tool in a sandboxed environment (container or VM) and inspect the code that will run. 4) Be aware the run script may probe local processes to auto-configure proxies (uses lsof) — if you run it on a system with local proxy services, the skill will route traffic through them. 5) If you do not trust the remote repo owner, do not run the setup script; ask the skill author to include the runtime code in the package or provide a vetted release. Additional useful info that would raise confidence: a packaged main.py for review, explicit declared env vars for any webhooks, and a signed/release-tagged GitHub repository with a reproducible install path.

功能分析

Type: OpenClaw Skill Name: defi-yield-monitor Version: 1.1.0 The skill bundle acts as a downloader and installer for an external repository (github.com/reed1898/defi-yield-monitor), which introduces supply chain risks. Additionally, `scripts/run.sh` contains logic to sniff local network processes using `lsof` to auto-detect proxy settings (QuickQ, Clash, V2Ray), an invasive behavior for environment discovery. While these actions are documented as supporting DeFi monitoring, the combination of remote code execution and local process inspection warrants caution.

能力评估

ℹ Purpose & Capability

Name/description (DeFi yield monitor) match the included scripts and config template: wallet addresses, protocols, APY/health-factor tracking are coherent. However the SKILL.md calls the project 'self-contained' yet the package lacks the primary runtime (main.py) and depends on cloning https://github.com/reed1898/defi-yield-monitor at setup — a contradiction between 'self-contained' and an external dependency.

⚠ Instruction Scope

Instructions tell the agent/user to run the provided setup/run scripts and to edit config with wallet addresses (expected). They also suggest automated delivery to Telegram/Discord but do not declare any required tokens or webhook fields in the skill metadata; the actual code that implements delivery (likely in the cloned repo's main.py) is not included for review. The run script probes system state (runs lsof via grep to auto-detect local proxies), which reads process/listening-port info outside the skill workspace.

⚠ Install Mechanism

There is no formal install spec in the registry, but scripts/setup.sh clones a GitHub repository and installs Python packages into a virtualenv. Cloning and then executing arbitrary code from a remote repo at setup/run time is a moderate risk: the source is a GitHub URL (better than an arbitrary paste/IP), but it still means code not shipped with the skill will be downloaded and executed on install.

ℹ Credentials

The skill declares no required environment variables or credentials (and no primaryEnv), which fits 'public endpoints/no API keys'. However SKILL.md mentions delivering reports to Telegram/Discord (which normally require tokens/webhooks) but the skill metadata doesn't request or document any such credentials — a mismatch that may lead the runtime code to prompt for or read sensitive tokens from config or other environment variables not disclosed here.

✓ Persistence & Privilege

always is false and the setup only creates a repo clone and a local virtualenv under the user's workspace, which is expected for this type of tool. There is no evidence the skill tries to modify other skills or system-wide settings. The run script's use of lsof inspects system processes, which is noteworthy but not a privilege escalation.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install defi-yield-monitor
安装完成后，直接呼叫该 Skill 的名称或使用 /defi-yield-monitor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.1.0

Standalone skill: includes setup.sh and run.sh scripts, auto proxy detection, no source code dependency. Just install and configure wallets.

v1.0.0

Initial release: Aave v3, SparkLend, Spark Savings, Kamino. APY tracking, 7d/30d yield summary, health factor alerts.

元数据

Slug defi-yield-monitor

版本 1.1.0

许可证 —

累计安装 1

当前安装数 1

历史版本数 2

常见问题