← 返回 Skills 市场

KaspaCom Lending MCP

Name: KaspaCom Lending MCP
Author: marciano147

作者 marciano147 · GitHub ↗ · v0.1.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install kaspacom-lending-mcp

功能描述

Use KaspaCom Lending through the KaspaCom DeFi MCP/CLI for market discovery, position checks, and lending actions like supply, borrow, and repay on IGRA and...

使用说明 (SKILL.md)

KaspaCom Lending MCP

Focused skill for KaspaCom lending via MCP/CLI.

Install

npm i -g @kaspacom/defi-mcp

Read-only examples

kaspacom-defi getMarkets --network igra
kaspacom-defi getPosition --address 0xYOUR_WALLET --network igra

Transaction examples

kaspacom-defi supply --token USDC --amount 500 --network igra
kaspacom-defi borrow --token WKAS --amount 50 --network igra
kaspacom-defi repay --token WKAS --amount max --network igra

Best for

Market snapshots
Wallet lending positions
Health factor checks
Collateral and borrowing flows
AI-agent access to KaspaCom lending

安全使用建议

This skill asks you to globally install an npm CLI and shows transaction commands but provides no source link or explanation of how private keys/signing are handled. Before installing or using it: 1) Verify the package (@kaspacom/defi-mcp) on npm and find its repository/homepage; review the code or maintainers. 2) Ask the publisher how the CLI obtains signing keys (env vars, keystore, hardware wallet, or prompts). Do not supply private keys to an unverified package or agent. 3) Prefer running any install in an isolated environment (container/VM) and audit the package for network calls and credential handling. 4) If you want read-only use, confirm that you can run queries without exposing secrets. 5) Decline or treat cautiously until the author provides provenance (package page, repository, and docs) and clarifies auth mechanisms.

功能分析

Type: OpenClaw Skill Name: kaspacom-lending-mcp Version: 0.1.0 The skill bundle provides instructions for using a CLI tool (@kaspacom/defi-mcp) to interact with KaspaCom DeFi lending markets. The SKILL.md file contains standard installation commands and usage examples for market discovery and transaction management (supply, borrow, repay) without any evidence of malicious intent, data exfiltration, or prompt injection.

能力标签

cryptorequires-wallet

能力评估

⚠ Purpose & Capability

The skill's name and examples show read-only queries and on-chain transactions (supply/borrow/repay). However, the skill declares no required credentials, wallet/private-key inputs, RPC endpoints, or config paths — all of which are normally necessary to perform blockchain transactions. The skill also has no homepage or source URL, making it harder to verify the requested package.

⚠ Instruction Scope

SKILL.md explicitly tells the agent to run 'npm i -g @kaspacom/defi-mcp' and to invoke CLI commands that perform transactions. Those transaction commands will require signing keys or other authentication, but the instructions do not explain how keys are supplied, where secrets are stored, or what network endpoints are used. The instructions thus ask the agent to perform disk/network actions without describing required secrets or safeguards.

⚠ Install Mechanism

The skill is instruction-only but instructs a global npm install of a scoped package (@kaspacom/defi-mcp). Installing a global npm package executes third-party code on the host — a moderate risk. The skill metadata contains no formal install spec and provides no package registry/source verification, homepage, or repository link to validate the package.

⚠ Credentials

No environment variables, credentials, or config paths are declared, yet the skill's transaction examples require private-key access or wallet integration. That absence is disproportionate and ambiguous: either the CLI magically has access to signing material (not stated) or the skill expects the agent to obtain/store secrets in unspecified ways.

✓ Persistence & Privilege

The skill does not request persistent elevated privileges (always:false) and is user-invocable. It does, however, instruct installing a global package which will persist on disk — this is part of the instruction set rather than metadata-declared persistence.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install kaspacom-lending-mcp
安装完成后，直接呼叫该 Skill 的名称或使用 /kaspacom-lending-mcp 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial publish

元数据

Slug kaspacom-lending-mcp

版本 0.1.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题