← 返回 Skills 市场
liji3597

Solana Investor

作者 liji3597 · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
272
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install solana-investor
功能描述
顶层投资助手编排器 — 协调 portfolio、dca、alerts、market 技能,处理复杂的多步骤投资请求。当用户的请求涉及多个操作或需要跨技能协调时触发。
安全使用建议
Do not install blindly. Ask the publisher why there are Node scripts when SKILL.md says 'no direct scripts', and request a clear list of what the '../../.. /shared' directory contains. Manually inspect the shared directory and database access the scripts use (users, dca_strategies, price_alerts, transactions). Confirm whether TELEGRAM_BOT_TOKEN, EXECUTION_SIGNER_REF, or a Helius API key are required and why — do not provide sensitive credentials until you understand and approve their necessity. If you must test, run the skill in an isolated environment (no production DB or keys) and review outputs; require the author to declare needed env vars and to document any read/write operations to external systems before enabling it for real users.
功能分析
Type: OpenClaw Skill Name: solana-investor Version: 0.1.0 The skill acts as an orchestrator for Solana investment tasks, providing logic for coordinating portfolio reviews, market checks, and trade execution. The included scripts (evaluate-execution-mode.js and get-metrics.js) are administrative utilities that report system readiness and performance metrics by querying a local database and checking environment variables (e.g., Helius API keys, Telegram tokens), with no evidence of malicious intent, unauthorized network calls, or data exfiltration.
能力评估
Purpose & Capability
Name/description say this is a top-level orchestrator coordinating sub-skills (portfolio, dca, alerts, market). Requiring node is reasonable for a JS-based orchestrator. However the package contains two Node scripts that reach into a '../../.. /shared' directory to load config, database, errors, and metrics — capabilities (reading a local DB and shared config) go beyond a pure prompt orchestrator and are not mentioned in SKILL.md. This is a mismatch but could be legitimate in a monorepo; it should be justified by the publisher.
Instruction Scope
SKILL.md states this is a prompt-only orchestrator and explicitly lists 'no direct scripts'. Despite that, scripts are present and those scripts read local files, query SQL tables (users, dca_strategies, price_alerts, transactions), and reference config-driven checks. The runtime instructions do not mention accessing a local database or shared config; that discrepancy broadens the agent's effective scope and should be explained.
Install Mechanism
No install spec is present (instruction-only), which is lower risk. The only runtime binary required is node (declared). No downloads or archive extraction are specified.
Credentials
The manifest declares no required environment variables, but the included code reads: config.heliusApiKey (from shared config) and process.env.TELEGRAM_BOT_TOKEN and process.env.EXECUTION_SIGNER_REF. Accessing a Telegram token and an execution signer reference (HSM/MPC/KMS pointer) and reading a local configuration file without declaring them is disproportionate and opaque. The scripts also query potentially sensitive local DB tables. These are not justified by the SKILL.md and should be declared and audited.
Persistence & Privilege
The skill is not force-included (always: false) and uses normal model invocation settings. It does reference and load shared code and local DB artifacts (via '../../.. /shared'), which gives it broad read access in a monorepo layout; this is not the same as requesting elevated platform privileges, but it increases the blast radius and should be reviewed before granting runtime access.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install solana-investor
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /solana-investor 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of solana-investor skill orchestrator. - Coordinates portfolio, DCA, alerts, and market skills for complex multi-step investment requests. - Provides workflow principles such as querying before actions, stepwise confirmation, and context passing. - Includes example orchestration patterns like “view + set alert”, “portfolio + DCA”, and “summary”. - Is only triggered for multi-skill user requests; simple requests are handled by sub-skills directly. - Ensures each write operation requires confirmation, and failed sub-steps do not block others.
元数据
Slug solana-investor
版本 0.1.0
许可证
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Solana Investor 是什么?

顶层投资助手编排器 — 协调 portfolio、dca、alerts、market 技能,处理复杂的多步骤投资请求。当用户的请求涉及多个操作或需要跨技能协调时触发。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 272 次。

如何安装 Solana Investor?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install solana-investor」即可一键安装,无需额外配置。

Solana Investor 是免费的吗?

是的,Solana Investor 完全免费(开源免费),可自由下载、安装和使用。

Solana Investor 支持哪些平台?

Solana Investor 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Solana Investor?

由 liji3597(@liji3597)开发并维护,当前版本 v0.1.0。

💬 留言讨论