← 返回 Skills 市场
strykragent

PRISM OS SDK

作者 StrykrAgent · GitHub ↗ · v0.1.2
cross-platform ⚠ suspicious
837
总下载
0
收藏
2
当前安装
3
版本数
在 OpenClaw 中安装
/install prism-finance-os
功能描述
Financial data SDK for AI Agents. 218+ read-only endpoints for market data, prices, fundamentals. Built for Cursor, Claude, OpenClaw. Data retrieval only.
安全使用建议
This package mostly looks like a comprehensive market-data SDK and correctly asks only for PRISM_API_KEY. The red flag is inconsistency: SKILL.md promises read-only behavior, but the repository and examples include 'execute' modules, simulate/execute flows, and references to swap execution that could accept a signer and produce transaction hashes. Before installing or enabling autonomous use: 1) Inspect src/modules/execute (and any onchain/dex files) to confirm they are truly simulation-only and do not send transactions or accept private keys. 2) Review package.json and package-lock for third-party dependencies and any postinstall scripts. 3) Verify the npm package and GitHub repo (authenticity and recent commits) match the published package. 4) Do not provide private keys or wallet mnemonics to the skill; if you need execution, prefer explicit signer objects you control in a sandbox. 5) If you want a safer setup, restrict autonomous invocation (disable model invocation for this skill) until you audit the execute functionality. If you want, I can scan specific source files (e.g., src/modules/execute/index.ts and any files that reference signer/wallet or external webhook URLs) and summarize exactly where execution or outbound side-effects occur.
功能分析
Type: OpenClaw Skill Name: prism-finance-os Version: 0.1.2 The OpenClaw AgentSkills bundle provides a powerful SDK for financial operations, including autonomous trading across crypto, DeFi, stocks, forex, and prediction markets. While the code itself appears to be a legitimate tool for its stated purpose, the `SKILL.md` documentation contains misleading statements, claiming 'Data retrieval only' and 'No trading execution', which directly contradict the extensive execution capabilities demonstrated in the `src/modules/execute/index.ts` module and the provided example agents. This discrepancy, combined with the inherent high-risk nature of autonomous financial transactions (e.g., market buys/sells, arbitrage, portfolio rebalancing), raises significant transparency concerns and could lead to an agent or user underestimating the skill's true capabilities and potential for financial loss if misused.
能力评估
Purpose & Capability
The SKILL.md and README repeatedly state 'read-only' and 'no wallet access / no trading execution'. However the bundle contains execute/dex modules, architecture docs and example code that reference quote simulation, dex.executeSwap, execute.* flows returning txHash, and integration patterns that auto-register many tools. This is an incoherence: a read-only SDK normally wouldn't include execution modules or examples that show producing txHash/executeSwap. The PRISM_API_KEY alone is plausible for read-only data, but the presence of execute functionality is not justified by the SKILL.md claims.
Instruction Scope
The runtime instructions (SKILL.md) are scoped to fetching market data and ask only for PRISM_API_KEY. They instruct installing the npm package and show read-only calls. But the repository files and examples call onchain and execute endpoints (getTopHolders, simulate/execute swap, risk.simulateTx, dex.executeSwap with signer), which extend scope beyond purely fetching public data. The SKILL.md does not disclose how execute methods behave or whether they can accept signer objects / trigger transactions.
Install Mechanism
No install spec in the skill manifest (instruction-only), and SKILL.md suggests 'npm install prism-finance-os' — a standard public install method. The bundle includes package.json and full source files, not an opaque remote download. This is lower risk than arbitrary URL installs, but you should still verify the npm package source and package.json dependencies before installing.
Credentials
Only PRISM_API_KEY is required and declared as the primary credential — this is proportional for a data SDK. There are no required env vars that obviously exceed the stated purpose. However, if you plan to use execute features, additional secrets (wallet/private keys, provider API keys) could be needed in practice; SKILL.md does not request them but code paths suggest such inputs may be accepted at runtime.
Persistence & Privilege
The skill does not request always:true and defaults are standard (user-invocable, model invocation allowed). There are no install-time behaviors in SKILL.md that modify other skills or system-wide settings. Autonomous invocation combined with the execute-capable code increases blast radius, but autonomy alone is expected platform behavior.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install prism-finance-os
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /prism-finance-os 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.2
- Added homepage, repository, and metadata fields to SKILL.md for improved discoverability. - Clarified description and security notes, including explicit mention of API key requirement and execution module limitations. - Added environment variable setup instructions and API link. - Updated links section to include API documentation and npm package. - Reformatted for clarity and concise reference.
v0.1.1
- Updated description to emphasize that the SDK is strictly read-only, with no trading or wallet access. - Added explicit security notes outlining the absence of trading capabilities and wallet interaction. - Simplified quick start and usage examples for clarity. - Revised data categories section to focus on main features and improvements in explanation. - Updated links and wording for clarity and relevance.
v0.1.0
Initial release of prism-finance-os: the Financial Operating System for AI Agents. - One SDK for unified financial data across crypto, DeFi, stocks, forex, macro, and prediction markets - 218+ endpoints and 24 data modules (including prices, yields, news, technicals, and more) - Features agent context injection for AI workflows and integrated endpoint discovery - Supports major LLM tools (Cursor, Claude, OpenClaw, ChatGPT, and autonomous agents) - Free tier: 5,000 calls/month; API key required
元数据
Slug prism-finance-os
版本 0.1.2
许可证
累计安装 2
当前安装数 2
历史版本数 3
常见问题

PRISM OS SDK 是什么?

Financial data SDK for AI Agents. 218+ read-only endpoints for market data, prices, fundamentals. Built for Cursor, Claude, OpenClaw. Data retrieval only. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 837 次。

如何安装 PRISM OS SDK?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install prism-finance-os」即可一键安装,无需额外配置。

PRISM OS SDK 是免费的吗?

是的,PRISM OS SDK 完全免费(开源免费),可自由下载、安装和使用。

PRISM OS SDK 支持哪些平台?

PRISM OS SDK 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 PRISM OS SDK?

由 StrykrAgent(@strykragent)开发并维护,当前版本 v0.1.2。

💬 留言讨论