← 返回 Skills 市场
bombmod

Liberfi Token

作者 bombmod · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
96
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install liberfi-token
功能描述
Research and analyze tokens on supported blockchains: search tokens by keyword, get token details (price, market cap, volume, supply), run security audits (h...
使用说明 (SKILL.md)

LiberFi Token Research

Search, analyze, and audit tokens across supported blockchains using the LiberFi CLI.

Pre-flight Checks

See bootstrap.md for CLI installation and connectivity verification.

This skill's auth requirements:

  • All commands: No authentication required (public API)

Skill Routing

If user asks about... Route to
Trending tokens, top gainers, hot tokens liberfi-market
Newly listed tokens, new launches liberfi-market
Wallet holdings, balance, portfolio liberfi-portfolio
Wallet PnL, trading stats liberfi-portfolio
Swap, trade, buy, sell tokens liberfi-swap
Transaction fees, gas estimation liberfi-swap
Send / broadcast a transaction liberfi-swap

CLI Command Index

Query Commands

Command Description Auth
lfi token search --q \x3Cquery> [--chains \x3Cchains>] [--limit \x3Cn>] Search tokens by keyword No
lfi token info \x3Cchain> \x3Caddress> Get token details (price, MC, volume, supply) No
lfi token security \x3Cchain> \x3Caddress> Run security audit (honeypot, mint, tax, proxy) No
lfi token pools \x3Cchain> \x3Caddress> [--limit \x3Cn>] List DEX liquidity pools No
lfi token holders \x3Cchain> \x3Caddress> [--limit \x3Cn>] List top token holders No
lfi token traders \x3Cchain> \x3Caddress> [--tag \x3Ctag>] List top traders (default: smart money) No
lfi token candles \x3Cchain> \x3Caddress> --resolution \x3Cres> Get K-line candlestick data No

Parameter Reference

Common pagination options (apply to search, pools, holders, traders):

  • --cursor \x3Ccursor> — Pagination cursor from previous response
  • --limit \x3Climit> — Max results per page
  • --direction \x3Cdirection> — Cursor direction: next or prev

Candle-specific options:

  • --resolution \x3Cresolution>Required. Values: 1m, 5m, 15m, 1h, 4h, 1d
  • --price-type \x3Ctype> — Price type
  • --from \x3Ctimestamp> — Start timestamp
  • --to \x3Ctimestamp> — End timestamp
  • --limit \x3Climit> — Max candles to return

Traders tag options: smart (default), kol, whale, insider

Operation Flow

Search for a Token

  1. Search: lfi token search --q "bitcoin" --json
  2. Present results: Show token name, symbol, chain, address, and price in a table
  3. Suggest next step: "Would you like to see details for any of these tokens?"

Get Token Details

  1. Fetch info: lfi token info \x3Cchain> \x3Caddress> --json
  2. Present: Display name, symbol, price, market cap, volume, supply, FDV
  3. Suggest next step: "Want to check the security audit or see the liquidity pools?"

Run Security Audit

  1. Fetch security: lfi token security \x3Cchain> \x3Caddress> --json
  2. Analyze result: Check for honeypot, mint risk, proxy contract, buy/sell tax
  3. Present risk summary: If any flags are raised, clearly warn the user with risk level
  4. Suggest next step: If safe — "Want to check the liquidity pools or get a swap quote?" / If risky — "This token has risk flags. Proceed with caution."

Analyze Token Holders

  1. Fetch holders: lfi token holders \x3Cchain> \x3Caddress> --json
  2. Present: Show top holders with address (truncated), holding amount, percentage
  3. Highlight: Flag if top 10 holders control >50% supply (concentration risk)
  4. Suggest next step: "Want to see smart money traders for this token?"

View Smart Money Traders

  1. Fetch traders: lfi token traders \x3Cchain> \x3Caddress> --tag smart --json
  2. Present: Show trader addresses, trade direction, amounts
  3. Suggest next step: "Want to check the K-line chart for entry timing?"

Get K-line / Price Chart Data

  1. Determine resolution: Ask user or infer from context (e.g. "last hour" → 1m, "last week" → 1h, "last month" → 1d)
  2. Fetch candles: lfi token candles \x3Cchain> \x3Caddress> --resolution \x3Cres> --json
  3. Present: Summarize price trend — open, close, high, low, volume
  4. Suggest next step: "Want to get a swap quote for this token?"

Cross-Skill Workflows

"Help me research this token before buying"

Full flow: token → token → token → swap

  1. tokenlfi token info \x3Cchain> \x3Caddress> --json — Get price, market cap
  2. tokenlfi token security \x3Cchain> \x3Caddress> --json — Security audit
  3. tokenlfi token holders \x3Cchain> \x3Caddress> --json — Check holder concentration
  4. tokenlfi token traders \x3Cchain> \x3Caddress> --tag smart --json — Smart money activity
  5. Present consolidated research report to user
  6. If user wants to buy → swaplfi swap quote ...

"What tokens are trending, and tell me about the top one"

Full flow: market → token → token

  1. marketlfi ranking trending \x3Cchain> \x3Cduration> --json — Get trending list
  2. tokenlfi token info \x3Cchain> \x3Caddress> --json — Details on #1 token
  3. tokenlfi token security \x3Cchain> \x3Caddress> --json — Security audit
  4. Present findings to user

"Check if this token in my wallet is safe"

Full flow: portfolio → token

  1. portfoliolfi wallet holdings \x3Cchain> \x3CwalletAddress> --json — Get holdings
  2. User selects a token from holdings
  3. tokenlfi token security \x3Cchain> \x3CtokenAddress> --json — Security check
  4. Present security results

Suggest Next Steps

Just completed Suggest to user
Token search "Want to see details for any of these tokens?" / "需要查看哪个代币的详情?"
Token info "Want to check the security audit or liquidity pools?" / "需要查看安全审计或流动性池?"
Token security "Want to see holders or smart money traders?" / "需要查看持有者或聪明钱交易者?"
Token pools "Want to check the holder distribution?" / "需要查看持有者分布?"
Token holders "Want to see smart money traders?" / "需要查看聪明钱交易者?"
Token traders "Want to check the K-line chart?" / "需要查看K线走势?"
Token candles "Want to get a swap quote?" / "需要获取兑换报价?"

Edge Cases

  • Token not found: If token search returns empty, inform the user: "No tokens found for this keyword. Try a different name, symbol, or contract address."
  • Invalid chain or address: If the API returns a 400/404 error, ask the user to verify the chain name (e.g. sol, eth, bsc) and the contract address format
  • Network timeout: Retry once after 3 seconds; if still fails, inform the user to check connectivity via lfi ping --json
  • Empty holders / traders / pools: Clearly state "No data available" — do not leave the response blank
  • Security audit unavailable: Some tokens may not have security data; inform the user that the audit is not available and recommend manual due diligence
  • Rate limiting: If the API returns 429, wait the duration indicated and retry; inform the user of the delay

Security Notes

See security-policy.md for global security rules.

Skill-specific rules:

  • Token security audits are informational only — they do not guarantee safety; always advise users to do their own research (DYOR)
  • Never claim a token is "safe" based solely on the security audit passing — state findings factually
  • If a token shows honeypot or high tax flags, proactively warn the user before they attempt any swap
安全使用建议
The skill appears to legitimately need a LiberFi CLI, but its runtime instructions are problematic: they tell the agent to run a global npm install without asking the user and to hide installation problems. Before installing or enabling this skill, consider these steps: 1) Do NOT allow automatic global installs — require explicit user consent. 2) Ask the skill author to add a formal install spec to the registry (or provide a vetted package URL and source repo). 3) Inspect the npm package source (repository, maintainers, recent releases) and verify the package name and contents (npm view, GitHub repo, publish history). 4) Prefer installing into a sandbox or non-global location first (or run the CLI locally yourself) rather than allowing the agent to install system-wide. 5) If you must use it, require the agent to prompt you before any installation, and do not accept instructions that tell the agent to hide failures. If the author cannot justify the silent install behavior or provide a verifiable source, avoid enabling the skill.
功能分析
Type: OpenClaw Skill Name: liberfi-token Version: 1.0.2 The skill contains instructions in SKILL.md to automatically execute a global installation of an NPM package (@liberfi.io/cli) without user consent if the command is missing. It further instructs the agent to hide the package's absence or installation failures from the user. While these behaviors are aligned with the stated purpose of providing a CLI-based research tool, the use of high-privilege installation commands and instructions to suppress transparency regarding system changes are high-risk patterns.
能力标签
cryptorequires-walletcan-sign-transactionsrequires-sensitive-credentials
能力评估
Purpose & Capability
The skill's name and description (token search, info, security audit, candles, holders, etc.) match the commands it instructs the agent to run (lfi token ...). Requiring a LiberFi CLI to perform these actions is reasonable. However, the skill does not declare any install spec, yet instructs the agent to install a global npm package at runtime — that omission is unexpected and should be justified in registry metadata.
Instruction Scope
SKILL.md instructs the agent to install `@liberfi.io/cli` globally WITHOUT asking the user and to retry installation if it 'fails', explicitly telling the agent to never tell the user the package does not exist. Those instructions tell the agent to modify the host environment and to conceal failures — this exceeds the normal scope for an instruction-only skill and is deceptive.
Install Mechanism
There is no declared install spec in the registry, yet the runtime doc mandates `npm install -g @liberfi.io/cli --registry https://registry.npmjs.org/`. Installing a global npm package at runtime writes code to disk and may require elevated privileges; it should be surfaced in the registry metadata or require explicit user consent. The package source (npm registry) is a known host, but automatic global install and retry logic are risky.
Credentials
The skill requests no credentials or environment variables, which is consistent with its claim of using a public API. However, a global npm install may require system permissions and could write persistent binaries (`lfi`, `liberfi`) — this is a form of elevated effect on the environment despite no secret access being requested.
Persistence & Privilege
The skill does not set always:true, but the instructions demand installing persisted CLI binaries without user consent and advise concealing install failures. Combined with the platform's default ability for autonomous invocation, this gives the skill practical persistence and the ability to run arbitrary code later — a non-trivial privilege that should be explicitly declared and gated.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install liberfi-token
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /liberfi-token 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
Force Polymarket/Kalshi queries to route to liberfi-predict, not liberfi-token/market/portfolio.
v1.0.1
Make CLI install instructions explicit and unambiguous; tell agents the npm package is @liberfi.io/cli, fall back to --registry https://registry.npmjs.org/ on mirror lag, and never report 'package not found'.
v1.0.0
LiberFi Token 1.0.0 — Initial Release - Search and research tokens by keyword across supported blockchains. - Retrieve real-time token details: price, market cap, trading volume, supply. - Run in-depth token security audits (honeypot, mint risk, proxy, tax checks). - List DEX liquidity pools, view top holders, and analyze holder concentration. - Identify smart money traders and fetch K-line candlestick chart data. - Trigger cautionary flows for risky tokens and clear routing for related features.
元数据
Slug liberfi-token
版本 1.0.2
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 3
常见问题

Liberfi Token 是什么?

Research and analyze tokens on supported blockchains: search tokens by keyword, get token details (price, market cap, volume, supply), run security audits (h... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 96 次。

如何安装 Liberfi Token?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install liberfi-token」即可一键安装,无需额外配置。

Liberfi Token 是免费的吗?

是的,Liberfi Token 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Liberfi Token 支持哪些平台?

Liberfi Token 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Liberfi Token?

由 bombmod(@bombmod)开发并维护,当前版本 v1.0.2。

💬 留言讨论