← 返回 Skills 市场
275
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pmt-skill
功能描述
Predict pump.fun token graduations (YES/NO) on Solana mainnet via PumpMarket parimutuel betting markets.
安全使用建议
This skill would legitimately need access to a Solana wallet to place bets, but the SKILL.md instructs the agent to read private keys from env vars or local files even though the registry metadata doesn't declare those secrets. Before installing: (1) Do not expose your main wallet private key—use a dedicated betting wallet funded with a small amount of SOL. (2) Verify ownership of the API/WebSocket host (pumpbet-mainnet.up.railway.app) and the homepage (pumpmarket.fun) — confirm they are official and review the posted IDL and program ID on-chain. (3) Prefer dry-run simulation and review the IDL/contract on Solana explorers to ensure the program behaves as claimed. (4) Confirm how Node dependencies will be installed and from which registries. (5) If you must provide a private key, use a short-lived or hardware-backed key and avoid storing it in plaintext environment variables or commits. If you want, provide the skill author/source or the exact IDL file URL and I can help verify the on-chain program and API endpoints further.
功能分析
Type: OpenClaw Skill
Name: pmt-skill
Version: 1.0.0
The OpenClaw AgentSkills skill bundle for PumpMarket is benign. It provides comprehensive documentation and code examples for interacting with a Solana DeFi prediction market. The `SKILL.md` clearly outlines the purpose, API interactions, and on-chain transaction flows, including explicit warnings about using real SOL on mainnet and best practices for keypair security. The `pumpbets.json` IDL describes a standard Solana smart contract interface with no apparent malicious instructions. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection against the agent, or obfuscation. The documentation even highlights a 'SECURITY FIX M3' in the smart contract, indicating a focus on security by the developers.
能力评估
Purpose & Capability
The skill's stated purpose (betting on PumpMarket markets using a Solana wallet) is coherent with the actions described in SKILL.md (constructing transactions, signing, posting to an API). However the registry metadata lists no required environment variables or keyfile paths while the instructions explicitly show loading private keys from a KEYPAIR_PATH or PRIVATE_KEY env var and using npm packages. The absence of declared credential requirements and the metadata/instruction mismatch is a coherence issue.
Instruction Scope
SKILL.md instructs an agent to read local keyfiles or environment variables, sign messages with a wallet private key, post signatures and wallet activity to an external API (https://pumpbet-mainnet.up.railway.app), and submit on-chain transactions. Those steps are functionally necessary for an autonomous betting agent, but they broaden scope to sensitive local secrets and external network I/O not reflected in the declared requirements. Posting signatures and wallet identifiers to third-party endpoints is explicit in the instructions.
Install Mechanism
There is no install spec (instruction-only skill), which limits direct disk writes. SKILL.md and metadata reference npm packages (@coral-xyz/anchor, @solana/web3.js) but the registry's top-level requirements only list curl. That mismatch (metadata claiming npm deps but no install declared) is an engineering inconsistency rather than an immediate supply-chain red flag, but you should confirm how/where those Node dependencies will be installed and from which registries before running.
Credentials
The skill needs a wallet private key to place bets and sign the 'terms' acceptance, which is proportionate to its betting purpose. However the registry does not declare any required env vars or config paths while SKILL.md shows examples using environment variables (PRIVATE_KEY, KEYPAIR_PATH). Declaring sensitive env vars but not listing them in metadata is an incoherence. Also posting signed messages to an external service and running autonomous transactions increases the risk if a high-value wallet is used.
Persistence & Privilege
The skill does not request always: true and does not include install-time scripts; persistence/privacy footprint is limited to the runtime instructions the agent follows. However, because the skill enables on-chain actions that spend real SOL, granting it access to wallet private keys (even temporarily) would let it perform transactions autonomously — a high-impact capability if keys are mishandled. This is a behavioral risk rather than a metadata misconfiguration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pmt-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/pmt-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
PMT Skill allows any Claw Agent to trade on PumpMarket
x.com/pumpmarketfun
pumpmarket.fun
元数据
常见问题
pumpmarket skill 是什么？
Predict pump.fun token graduations (YES/NO) on Solana mainnet via PumpMarket parimutuel betting markets. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 275 次。
如何安装 pumpmarket skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pmt-skill」即可一键安装，无需额外配置。
pumpmarket skill 是免费的吗？
是的，pumpmarket skill 完全免费（开源免费），可自由下载、安装和使用。
pumpmarket skill 支持哪些平台？
pumpmarket skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 pumpmarket skill？
由 King0（@notking0）开发并维护，当前版本 v1.0.0。
推荐 Skills