← 返回 Skills 市场

KyberSwap Arbitrage

Name: KyberSwap Arbitrage
Author: harleyscodes

作者 HarleysCodes · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

734

总下载

当前安装

版本数

在 OpenClaw 中安装

/install kyberswap-arbitrage

功能描述

Perform triangular arbitrage on Base via KyberSwap by finding profitable token swaps, calculating optimal paths, and executing multi-hop trades with gas and...

使用说明 (SKILL.md)

KyberSwap Arbitrage

Overview

Triangular arbitrage: profit from price differences between 3 tokens (e.g., USDC → ETH → USDT → USDC)

Key Contracts (Base Mainnet)

Router: 0x6131B5fae19EA4f9D964eAc0408E4408b2a37dD8
Factory: 0x5F1dddbf348aC2BEbe18559BF0eDE9D3fE6ce35f

Core Logic

1. Get Quotes

const router = new ethers.Contract(routerAddr, routerABI, provider);

// Get amounts out for exact input
const [amountOut] = await router.getAmountsOut(
  amountIn,      // Wei amount
  [tokenA, tokenB, tokenC] // Path
);

2. Calculate Profit

profit = finalAmount - initialAmount - gasCosts

3. Execute Swap

const tx = await router.swapExactTokensForTokens(
  amountIn,
  amountOutMin,
  path,
  recipient,
  deadline
);

Token Addresses (Base)

USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
USDT: 0xfde4C96c85940E8F44A6D8d5e4fD4f4C4f9D8E8
ETH: 0x4200000000000000000000000000000000000006
WETH: 0x4200000000000000000000000000000000000006

Arbitrage Pairs (Base)

Common triangular paths:

USDC → ETH → USDC
USDC → WETH → USDT → USDC
USDT → ETH → USDC → USDT

Safety Checks

Slippage: Set amountOutMin = output * (1 - slippage%)
Gas: Estimate gas, ensure profit > gas
Max Price Impact: Check pool reserves before large trades
Renounced Contracts: Only trade tokens with renounced ownership

Risk Profile

Aggressive but audit-first
Skip all non-renounced contracts
Check for honeypot tokens

安全使用建议

This skill contains reasonable arbitrage logic but is missing critical operational detail: how it will connect to Base (RPC) and sign transactions (private key or wallet). Before installing or running it, ask the publisher for source code and an explicit list of required environment variables (RPC_URL, PRIVATE_KEY or signer method), and verify where those values would be provided. Never paste your private key into a skill UI or provide it to an untrusted skill. If you plan to use the skill, test on a non-production network with a wallet funded with minimal funds; verify all contract and token addresses on a block explorer; prefer using a hot wallet with limited funds or a dedicated small-balance account; require explicit, auditable transaction signing (i.e., sign transactions locally/offline) rather than giving the skill custody of keys. If the publisher cannot provide source or clarify how credentials are handled, treat the skill as unsafe to run with real funds.

功能分析

Type: OpenClaw Skill Name: kyberswap-arbitrage Version: 1.0.0 The skill bundle describes a legitimate decentralized finance (DeFi) operation: triangular arbitrage on the Base network via KyberSwap. The `SKILL.md` file provides clear instructions for the AI agent on how to find opportunities, calculate profits, and execute swaps, including illustrative code snippets. Crucially, it also includes 'Safety Checks' and 'Risk Profile' sections that guide the agent to perform due diligence, check for renounced contracts, and avoid honeypot tokens, indicating a focus on secure and responsible operation. There is no evidence of prompt injection, data exfiltration, unauthorized command execution, or any other malicious intent.

能力评估

⚠ Purpose & Capability

The skill claims to discover and execute on-chain triangular arbitrage on Base (KyberSwap). Executing swaps requires a web3 provider (RPC), a signing wallet/private key, and funded account(s). The registry metadata and SKILL.md declare no required env vars, credentials, or RPC endpoints — this is inconsistent with the stated purpose.

ℹ Instruction Scope

SKILL.md contains concrete ethers.js calls (getAmountsOut, swapExactTokensForTokens), contract addresses, and safety checks (slippage, gas, reserves). It does not instruct reading local files or unrelated system secrets, but it implicitly requires access to a provider and signer which are not declared. The instructions are narrowly scoped to arbitrage logic but leave out how to obtain RPC/provider and signing authority.

✓ Install Mechanism

This is an instruction-only skill with no install spec and no code files — nothing will be written to disk by the platform installer. That is the lower-risk and expected format for a guide-style skill.

⚠ Credentials

No environment variables or credentials are declared, yet the functionality necessarily requires sensitive credentials (RPC URL, private key or wallet access) and funded accounts. The absence of declared secrets is disproportionate to the capability and is a red flag for missing/incomplete specification or potential hidden expectations about how the agent should obtain keys.

✓ Persistence & Privilege

The skill does not request always:true, does not declare any config paths, and does not appear to modify system or other-skill settings. No persistence or elevated platform-wide privilege is requested.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install kyberswap-arbitrage
安装完成后，直接呼叫该 Skill 的名称或使用 /kyberswap-arbitrage 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of kyberswap-arbitrage on Base network. - Find triangular arbitrage opportunities, calculate optimal swap paths, and execute multi-hop trades using KyberSwap. - Utilizes key contracts: Router (`0x6131B5...`) and Factory (`0x5F1dddb...`). - Includes safety checks for slippage, gas costs, price impact, and token contract ownership. - Supports commonly used Base tokens (USDC, USDT, ETH/WETH). - Prioritizes aggressive arbitrage while auditing for potential risks.

元数据

Slug kyberswap-arbitrage

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题