← 返回 Skills 市场
SUPAH DeFi Optimizer
作者
supah-based
· GitHub ↗
· v1.3.0
· MIT-0
126
总下载
0
收藏
1
当前安装
4
版本数
在 OpenClaw 中安装
/install supah-defi-optimizer
功能描述
DeFi yield optimization, impermanent loss tracking, and portfolio management for Base blockchain. Find the best yields, monitor LP positions, and optimize De...
安全使用建议
This skill appears to implement the described DeFi features, but note two practical risks before installing: (1) Each call triggers an x402 micropayment to the embedded address (check and accept the payTo address and costs; set limits). (2) The SUPAH_API_BASE env var can override the API host — only set it to a trusted URL (default is https://api.supah.ai). Recommended steps: verify the publisher (look up the GitHub repo or the official supah.ai site), run the included index.js in a sandbox to inspect responses, restrict agent autonomy or set a per-call budget so the agent cannot make many paid calls automatically, and avoid providing private keys or wallet secrets to this skill. If you rely on a corporate or controlled environment, have an operator review the payTo address and x402 client behavior first.
能力评估
Purpose & Capability
Name/description, API endpoints, and bundled index.js align with a DeFi optimizer for Base. Requiring node is expected. Requiring curl (declared in SKILL.md) is unnecessary given the included index.js uses Node's https — this is a minor mismatch but not proof of malicious intent. The SUPAH_API_BASE env var is a reasonable override for the API base URL.
Instruction Scope
SKILL.md and index.js only call the SUPAH API for wallet/position data — no file system or secret harvesting. However, SKILL.md specifies an automatic x402 micropayment model and embeds a payTo address; the agent's 'x402-compatible HTTP client pays automatically' implies the skill will trigger value transfers on each call. That is out-of-band behavior (economic transfers) that users should treat as a risk. Also, while SKILL.md metadata restricts outbound host to api.supah.ai, the code honors SUPAH_API_BASE if set — a maliciously set env var could redirect traffic to another host.
Install Mechanism
There is no download/install script; this is instruction-only with a small node script included. Nothing in the install surface writes arbitrary archives or executes remote installers. Risk from install mechanism is low.
Credentials
The skill only requests one env var (SUPAH_API_BASE) and no secrets, which is proportionate. Caveat: SUPAH_API_BASE can be used to point the skill at any endpoint if the user sets it, so ensure it's set only to the official API. The embedded x402 payTo address is not a secret but encodes where user funds will be sent — this is a non-credential risk (financial outflow) and should be acknowledged.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no system config paths. It can be invoked autonomously (platform default), which combined with the micropayment behavior increases the blast radius if the agent is allowed to act without limits.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install supah-defi-optimizer - 安装完成后，直接呼叫该 Skill 的名称或使用
/supah-defi-optimizer触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.0
Removed all API key references, free tiers, subscription pricing. x402 only.
v1.2.0
Security: declared required bins, env vars, outbound network, x402 payment details in metadata.
v1.1.0
x402 only: removed free tier and subscriptions, added Moralis attribution
v1.0.0
Initial release: Yield route optimization. x402 micropayments.
元数据
常见问题
SUPAH DeFi Optimizer 是什么？
DeFi yield optimization, impermanent loss tracking, and portfolio management for Base blockchain. Find the best yields, monitor LP positions, and optimize De... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 126 次。
如何安装 SUPAH DeFi Optimizer？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install supah-defi-optimizer」即可一键安装，无需额外配置。
SUPAH DeFi Optimizer 是免费的吗？
是的，SUPAH DeFi Optimizer 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
SUPAH DeFi Optimizer 支持哪些平台？
SUPAH DeFi Optimizer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SUPAH DeFi Optimizer？
由 supah-based（@supah-based）开发并维护，当前版本 v1.3.0。
推荐 Skills