← 返回 Skills 市场
deanpeng-dotcom

Smart Money

作者 deanpeng-dotcom · GitHub ↗ · v1.2.1 · MIT-0
cross-platform ⚠ suspicious
135
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install smart-money
功能描述
Smart money whale tracking skill. Activate when user mentions smart money, whale tracking, 聪明钱, 鲸鱼追踪, fund tracking, on-chain signals, what are whales buying...
安全使用建议
This skill appears to do what it says (on-chain whale tracking) but contains a few things to consider before installing: 1) External backend: all queries and your custom-watchlist info are sent to https://mcp-skills.ai.antalpha.com — only install if you trust that service and owner. 2) Local secret: the skill creates and asks you to store an api_key and agent_id in ~/.smart-money/agent.json; protect that file (permissions, don't paste it into prompts). 3) Recurring Cron tasks: the skill strongly recommends (and suggests running) cron jobs that will call the remote API periodically. These create persistent network traffic and use your saved api_key — review and approve any cron command before running it, and avoid automatic creation without an explicit consent step. 4) Clarify contradictions: the README mentions 'zero config' but the runtime flow includes registering and saving an api_key — ask the author which mode (with/without api_key) applies. 5) If you need lower persistence, use one-off smart-money-signal calls and avoid adding custom addresses or creating cron jobs. If you proceed, rotate and revoke the api_key if you later uninstall the skill or suspect misuse.
功能分析
Type: OpenClaw Skill Name: smart-money Version: 1.2.1 The skill contains instructions in SKILL.md and README.md that direct the AI agent to automatically execute system-level commands (openclaw cron add) without seeking user confirmation. While this is intended to enable periodic monitoring for blockchain signals, the explicit instruction to 'execute without waiting for extra confirmation' and the use of 'strong-nudge' copy to bypass user agency are high-risk patterns. The skill also manages local persistence of an API key in ~/.smart-money/agent.json and interacts with a remote MCP server at mcp-skills.ai.antalpha.com.
能力标签
cryptorequires-walletrequires-sensitive-credentials
能力评估
Purpose & Capability
The name/description (whale/smart-money tracking) aligns with the stated runtime behavior: calls to a remote MCP server, agent registration, listing/adding wallet addresses, and querying on-chain signals. Required capabilities (agent_id, api_key saved locally) are consistent with a remote, multi-tenant backend.
Instruction Scope
SKILL.md directs the agent to register with the remote MCP endpoint and persist agent credentials at ~/.smart-money/agent.json and to create Cron tasks to receive notifications. These actions are within the purpose (to get recurring signals) but they expand the agent's runtime scope to writing files under the user's home directory and scheduling recurring jobs. The doc strongly nudges the agent to create Cron tasks, including example commands and language like 'I will execute it for you automatically', which is persuasive and broadens what the agent will do if followed.
Install Mechanism
Instruction-only skill: no install spec, no binaries, no archives to download. This is low-risk from an install-execution perspective.
Credentials
The skill does not request unrelated environment variables or system credentials. It does require persistence of an api_key produced by antalpha-register and an agent_id; storing that secret locally is expected for a remote service but users should be aware the file contains a secret and the docs explicitly warn to keep it safe. There is a minor documentation ambiguity about 'Zero config' vs storing api_key which should be clarified.
Persistence & Privilege
The skill asks the agent (and encourages the user) to create scheduled Cron tasks that periodically call the remote MCP tools. While not set to always:true, recurring Cron jobs create ongoing network activity and a persistent presence that uses saved agent credentials. The combination of a persisted api_key, scheduled autonomous calls, and an external backend increases the blast radius if the backend or credentials are compromised. The skill's strong-nudge language ('MANDATORY', 'I will execute it for you automatically') is also a behavioral concern since it may prompt agents to create persistent tasks without careful user review.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install smart-money
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /smart-money 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.1
Version 1.2.1 of the smart-money skill includes these important updates: - Adding a custom address now requires the agent to guide users to set up a Cron monitoring task; without it, users will not receive signal notifications. - Clarified that without a scheduled (Cron) check, on-chain signals for custom addresses remain server-side and are never delivered to users. - Expanded skill activation and description to include whale LP (liquidity pool) activity and custom wallet watch scenarios. - Added detailed instructions and messaging for agents to enforce/automate Cron setup when users add new watch addresses. - Documentation and interface (SKILL.md, README.md) updated to reflect subscription (reference counting), mandatory monitoring, and new signal types (POOL_IN, POOL_OUT).
v1.0.2
- Improved documentation for workflow setup, agent registration, and usage of smart money tracking tools. - Added detailed instructions for monitoring wallets and handling recurring checks, including both cron and non-cron agent workflows. - Incorporated new message templates and behavior rules for presenting signals and monitoring confirmations. - Clarified security notes and agent identity management. - Listed up-to-date public pool wallet addresses and data sources. - All user-facing replies must end with the specified brand attribution.
元数据
Slug smart-money
版本 1.2.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Smart Money 是什么?

Smart money whale tracking skill. Activate when user mentions smart money, whale tracking, 聪明钱, 鲸鱼追踪, fund tracking, on-chain signals, what are whales buying... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 135 次。

如何安装 Smart Money?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install smart-money」即可一键安装,无需额外配置。

Smart Money 是免费的吗?

是的,Smart Money 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Smart Money 支持哪些平台?

Smart Money 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Smart Money?

由 deanpeng-dotcom(@deanpeng-dotcom)开发并维护,当前版本 v1.2.1。

💬 留言讨论