← 返回 Skills 市场
347
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install overlay-market
功能描述
Trade leveraged perpetual futures on Overlay Protocol (BSC). Scan markets, analyze prices with technical indicators, check wallet balance, encode build/unwin...
安全使用建议
This skill appears to do what it says, but take these practical precautions before installing or using it:
- Never put a high-value raw private key into OVERLAY_PRIVATE_KEY. Prefer an external signer, a multisig (Safe), or a dedicated low-value wallet as the README recommends. Use --owner and dry-run where possible.
- The skill uses a default Overlay-operated proxy for 1inch calls; that proxy will observe swap request details. To avoid that, set ONEINCH_API_KEY so the skill calls api.1inch.dev directly.
- Verify the contract addresses (CONTRACTS.*) and external endpoints (api.overlay.market, api.goldsky.com) yourself before sending real transactions — the registry lists an unknown source and no homepage.
- Run npm install in an isolated environment and audit dependencies (npm audit / inspect viem versions). Consider running the code in a sandbox or container first.
- Use dry-run/simulation options frequently (build.js/unwind.js support simulation) and test with a low-value wallet.
- Review send.js's allowed-target list and understand it enforces only SHIVA and USDT token calls; if you change the code, re-audit those checks.
If you want a deeper assurance: ask the publisher for a verifiable source repo or signed release, or request a code review focusing on the proxy usage and dependency supply chain. If you cannot verify the origin, treat the skill as untrusted tooling and restrict the wallet used with it.
功能分析
Type: OpenClaw Skill
Name: overlay-market
Version: 0.1.6
The overlay-market skill bundle is a well-structured tool for trading on the Overlay Protocol. It demonstrates security-conscious design by implementing an allow-list of target contracts (Shiva and USDT) and restricting USDT interactions to the 'approve' function within `send.js`. Additionally, `unwind.js` performs client-side ABI decoding of 1inch swap data to verify minimum return amounts before transaction encoding. While the skill handles sensitive private keys, the documentation explicitly warns against using them with significant funds, and the code lacks any indicators of data exfiltration or unauthorized execution.
能力评估
Purpose & Capability
Name/description match the included scripts (scan, chart, build, unwind, send, approve, balance, positions). Required network endpoints and contract addresses are consistent with trading on Overlay Protocol on BSC. No unrelated credentials or binaries are requested.
Instruction Scope
Runtime instructions and scripts operate within the trading domain: they call Overlay APIs, a Goldsky subgraph, 1inch (or an Overlay proxy), and BSC RPC; read/write a local .cache directory; and optionally derive/sign transactions from OVERLAY_PRIVATE_KEY. Notable: unwind.js/build.js may request 1inch swap calldata via a default Overlay-operated Cloudflare Workers proxy (1inch-proxy.overlay-market-account.workers.dev) unless you set ONEINCH_API_KEY to call api.1inch.dev directly. The proxy will see swap request details — this is documented in SKILL.md but is a privacy/operational consideration, not an unexplained action. The code reads .cache but does not transmit its contents.
Install Mechanism
This is instruction-only (no install spec). SKILL.md asks to run npm install (package.json depends on 'viem'). Pulling viem and its normal crypto dependencies from the public npm registry is expected for Ethereum/BSC tooling. No downloads from untrusted URLs or archive extraction are present.
Credentials
Only optional env vars are referenced: OVERLAY_PRIVATE_KEY (for signing), BSC_RPC_URL, and ONEINCH_API_KEY. Each is directly used by the scripts for signing, RPC endpoint, or calling 1inch; no unrelated secrets or system credentials are requested.
Persistence & Privilege
The skill is not 'always' enabled and does not request persistent system-wide privileges. It does not modify other skills or global agent settings. Autonomous invocation is allowed by default (platform behavior) but not combined with extra privileges here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install overlay-market - 安装完成后，直接呼叫该 Skill 的名称或使用
/overlay-market触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.6
- Added new script: approve.js to allow USDT spending for the LBSC contract.
- The approve.js script lets users authorize USDT (unlimited or custom amount) before the first build.js transaction and displays current allowance if OVERLAY_PRIVATE_KEY is set.
- Updated documentation to include approve.js usage and workflow for token approval prior to trading.
v0.1.5
- Updated version number to 0.1.5.
- Added "Static Analysis Notes" clarifying use of environment variables and local file handling for false-positive warnings in code analysis.
- No functional or code changes; documentation update only.
v0.1.4
- Reformatted and clarified environment variable, external service, and script documentation for easier reference.
- Updated sections to use tables and concise bullet points instead of long prose.
- No functional or code changes; documentation only.
v0.1.3
- Added support for ONEINCH_API_KEY environment variable, allowing direct access to the 1inch Swap API (api.1inch.dev) for swap quotes in unwind.js.
- Updated documentation to clarify 1inch API usage: if ONEINCH_API_KEY is set, Overlay proxy is bypassed.
- Improved security guidance for private key usage, recommending external signers or test wallets for real funds.
- No functional script changes outside of environment configuration and documentation.
v0.1.2
- Updated environment variable configuration instructions: agents must set environment variables before running scripts.
- Clarified setup steps for using private keys and external signers.
- Minor documentation improvements for easier integration and agent usage.
v0.1.1
- Added explicit ENV variable documentation for OVERLAY_PRIVATE_KEY and BSC_RPC_URL in the skill manifest.
- Listed all external APIs and services used by the scripts for transparency.
- No changes to scripts or functionality; this is a documentation and metadata update only.
v0.1.0
Initial release of the Overlay Market skill.
(https://overlay.market)
- Trade leveraged perpetual futures on Overlay Protocol (BSC) across 30+ synthetic markets.
- Scan markets, analyze technical indicators on charts, and check wallet balances.
- Encode transactions for opening and closing positions; supports slippage protection and dry-run simulation.
- Monitor open positions with real-time PnL tracking.
- Produces unsigned transactions for flexible signing; includes scripts for research, trading, and transaction management.
元数据
常见问题
Overlay Market (perpetual futures trading) 是什么？
Trade leveraged perpetual futures on Overlay Protocol (BSC). Scan markets, analyze prices with technical indicators, check wallet balance, encode build/unwin... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 347 次。
如何安装 Overlay Market (perpetual futures trading)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install overlay-market」即可一键安装，无需额外配置。
Overlay Market (perpetual futures trading) 是免费的吗？
是的，Overlay Market (perpetual futures trading) 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Overlay Market (perpetual futures trading) 支持哪些平台？
Overlay Market (perpetual futures trading) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Overlay Market (perpetual futures trading)？
由 Arthur G.（@arthurka-o）开发并维护，当前版本 v0.1.6。
推荐 Skills