← 返回 Skills 市场
pancake skills
作者
Keti Yohannes
· GitHub ↗
· v1.0.0
607
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pancake-swap-skills
功能描述
BSC (Binance Smart Chain) trading on PancakeSwap — wallet creation, token swaps, pair discovery, and balance management.
安全使用建议
This skill does what it says (PancakeSwap trading) but handles extremely sensitive material (private keys) and the published metadata doesn't match the runtime instructions. Before installing: 1) Verify the skill publisher/source (unknown source is risky). 2) Prefer using testnet (chain ID 97) first to validate behavior. 3) Do NOT use your main funds — create a dedicated small‑balance wallet and consider a hardware wallet or an encrypted keystore rather than plaintext privateKey in JSON. 4) Inspect and run the Node.js wallet creation snippet locally yourself; consider modifying it to encrypt the key (e.g., using ethers.Wallet.encrypt) and avoid storing privateKey in plaintext. 5) Ensure file permissions and disk encryption for ~/.config/bsc_agent/wallet.json and do not share it. 6) Require explicit, human-confirmed approvals for any transaction (and consider disabling autonomous model invocation for this skill). 7) Ask the publisher to fix the registry metadata to list required env vars/credentials and document when and how the skill will prompt for confirmation. If you cannot verify the source or enforce human confirmation, treat the skill as high risk and avoid installing it.
功能分析
Type: OpenClaw Skill
Name: pancake-swap-skills
Version: 1.0.0
The OpenClaw AgentSkills skill bundle for PancakeSwap is classified as benign. The skill transparently declares its purpose, file access (`~/.config/bsc_agent/wallet.json`, `~/.config/clawchain/credentials.json`), and network calls (BSC RPC, ClawChain node). Crucially, it includes strong security measures and explicit instructions to the AI agent: the wallet creation script sets owner-only permissions (`0o600`) for the private key file, and the documentation repeatedly warns against logging or transmitting the private key, emphasizing local signing. There is no evidence of prompt injection attempts, data exfiltration, or other malicious intent; the provided code snippets and instructions are directly aligned with the stated purpose of managing a BSC wallet and performing token swaps.
能力评估
Purpose & Capability
The skill claims PancakeSwap trading (wallet creation, swaps, balance checks) and the SKILL.md instructions require exactly the things needed for that: an RPC URL, router and WBNB addresses, a local wallet file, Node.js and ethers. However the registry metadata at the top of the submission lists no required environment variables or primary credential while the SKILL.md defines several required env vars and a wallet credential — this metadata mismatch is incoherent and should be corrected/clarified by the publisher.
Instruction Scope
The runtime instructions explicitly create and read a local wallet file (~/.config/bsc_agent/wallet.json) containing the wallet privateKey and show a Node.js one‑liner that writes the private key in JSON (albeit with file mode 0o600). The skill also instructs signing and submitting transactions via the BSC RPC. Those actions are necessary for on‑chain trading but are high‑sensitivity (private key material + ability to move funds). The SKILL.md promises user confirmation before trades, but as an instruction-only skill there's no enforced technical guard: an agent with access to the wallet file could sign and send transactions if invoked autonomously.
Install Mechanism
This is an instruction-only skill (no install spec or code files). It recommends installing Node.js and the ethers npm package via 'npm install ethers' — a standard, traceable dependency installation. No downloads from untrusted URLs or archive extraction are present in the instructions.
Credentials
The skill requires direct access to a private-key wallet file and environment variables for BSC_RPC_URL, PANCAKE_ROUTER, WBNB and chain ID — all are relevant to on‑chain operations. That said, requiring read/write access to a private key file is a high-privilege request; the registry metadata omission of these env requirements increases suspicion. The optional read of another skill's credentials (~/.config/clawchain/credentials.json) is plausible for registration but cross-skill credential access should be documented and justified.
Persistence & Privilege
The skill is not marked always:true (so it's not force-included), but it is user-invocable and the platform default allows autonomous invocation. Combined with wallet file access, autonomous invocation increases blast radius (the agent could sign/send transactions). The SKILL.md states trades won't be executed without user confirmation, but that is an instruction rather than an enforced platform constraint — the user should ensure model invocation policies and confirmations are in place.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pancake-swap-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/pancake-swap-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
**Major update: PancakeSwap skill for BSC rewritten, expands feature coverage and setup clarity.**
- Adds wallet creation and management, including security best practices and file path configuration.
- Supports BEP-20 token discovery, liquidity checks, and balance queries.
- Implements swap execution via PancakeSwap V2 with slippage protection.
- Environment variables have clear defaults for mainnet and testnet, with setup examples.
- Clarifies file access, credentials, and dependencies.
- Documents optional integration with ClawChain for event tracking.
- Emphasizes transparency and security throughout configuration and usage.
元数据
常见问题
pancake skills 是什么？
BSC (Binance Smart Chain) trading on PancakeSwap — wallet creation, token swaps, pair discovery, and balance management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 607 次。
如何安装 pancake skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pancake-swap-skills」即可一键安装，无需额外配置。
pancake skills 是免费的吗？
是的，pancake skills 完全免费（开源免费），可自由下载、安装和使用。
pancake skills 支持哪些平台？
pancake skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 pancake skills？
由 Keti Yohannes（@kj-script）开发并维护，当前版本 v1.0.0。
推荐 Skills