← 返回 Skills 市场
297
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install onchain-contract-token-analysis
功能描述
Analyze smart contracts, token mechanics, permissions, fee flows, upgradeability, market risks, and likely attack surfaces for onchain projects. Use when rev...
安全使用建议
This skill is coherent and appears to only guide the agent on how to analyze on‑chain contracts. Before installing or enabling it: (1) confirm your agent's network and repository file access policies — the skill expects the agent may fetch live chain/explorer data and read repo files for ABIs/deployment scripts; (2) do not provision unrelated credentials (AWS, generic secrets) to the agent just to accommodate the skill — if you need explorer/provider APIs, supply only the specific API keys you trust; (3) treat the skill's findings as heuristics: it warns against calling things malicious without code evidence, so manual verification against on‑chain data and source code is still advised.
功能分析
Type: OpenClaw Skill
Name: onchain-contract-token-analysis
Version: 1.0.0
The skill bundle provides a comprehensive and professional framework for an AI agent to perform security audits on smart contracts and tokens. The instructions in SKILL.md focus on identifying risks such as reentrancy, administrative centralization, and honeypot behavior without any evidence of malicious intent, data exfiltration, or harmful prompt injection.
能力评估
Purpose & Capability
Name, description, and detailed SKILL.md all focus on analyzing smart contracts, token mechanics, permissions, fee flows, upgradeability, and attack surfaces. There are no unrelated environment variables, binaries, or install steps requested that would be disproportionate to this purpose.
Instruction Scope
The instructions correctly describe how to analyze source/ABIs, trace flows, and check upgradeability. They ask the agent to infer scope from files, addresses, ABIs, deployment scripts, or docs and to verify live chain/explorer data when needed — which is appropriate for the task but means the agent may perform network queries or read repository files to collect context. The SKILL.md does not instruct reading unrelated system files or exfiltrating secrets.
Install Mechanism
No install spec or code files are present; this is instruction-only, so nothing is written to disk or downloaded during install.
Credentials
The skill requests no environment variables or credentials. In practice, useful runtime checks (node/provider APIs, explorer APIs) might require keys that are not declared here — this is not inherently malicious but means the agent or user may need to supply third‑party API keys outside the skill manifest.
Persistence & Privilege
always is false and the skill is user‑invocable. It does not request persistent system presence or modify other skills' configurations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install onchain-contract-token-analysis - 安装完成后，直接呼叫该 Skill 的名称或使用
/onchain-contract-token-analysis触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release.
元数据
常见问题
onchain contract token analysis 是什么？
Analyze smart contracts, token mechanics, permissions, fee flows, upgradeability, market risks, and likely attack surfaces for onchain projects. Use when rev... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 297 次。
如何安装 onchain contract token analysis？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install onchain-contract-token-analysis」即可一键安装，无需额外配置。
onchain contract token analysis 是免费的吗？
是的，onchain contract token analysis 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
onchain contract token analysis 支持哪些平台？
onchain contract token analysis 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 onchain contract token analysis？
由 Rowan（@0xrowan）开发并维护，当前版本 v1.0.0。
推荐 Skills