← 返回 Skills 市场
clawd800

Pumpclaw

作者 clawd800 · GitHub ↗ · v2.1.0
cross-platform ⚠ suspicious
1951
总下载
1
收藏
3
当前安装
5
版本数
在 OpenClaw 中安装
/install token-launcher
功能描述
Revenue infrastructure for autonomous AI agents on Base. Deploy ERC20 tokens with Uniswap V4 liquidity — 80% trading fees to creator, LP locked forever, $0 c...
安全使用建议
Do not export your main wallet private key or run the included scripts unless you fully trust and have audited the source and the on-chain contracts. Specific concerns: (1) The SKILL.md and code require BASE_PRIVATE_KEY but the metadata doesn't declare it — that mismatch is a red flag. (2) The scripts import ../../../shared/contracts.js and ../../../shared/abis.js which are not in the package, so execution will depend on host-provided files (including CHAIN.RPC) you can't review here. (3) Running the suggested npx commands will fetch npm packages at runtime. If you still want to test: use a throwaway wallet funded with only a tiny amount of gas, inspect the referenced contracts/ABIs on the GitHub repo (verify factory & locker addresses match on-chain), and run commands in a sandboxed environment. If you require higher assurance, request the missing shared files and a full repo link (or a signed release) and have the smart contracts audited before providing any private keys.
功能分析
Type: OpenClaw Skill Name: token-launcher Version: 2.1.0 The OpenClaw AgentSkills skill bundle 'token-launcher' is designed for deploying and managing ERC20 tokens on the Base blockchain. The `SKILL.md` provides clear instructions for setting the `BASE_PRIVATE_KEY` environment variable, which is then used by the `scripts/pumpclaw.ts` and `scripts/swap.ts` files to sign and send blockchain transactions via the `viem` library. All code and documentation align with the stated purpose of creating and managing tokens, claiming fees, and performing swaps. There is no evidence of data exfiltration (beyond necessary blockchain interactions), malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts designed to mislead the AI agent into unauthorized actions. The use of a private key is inherent to the skill's functionality and is explicitly documented.
能力评估
Purpose & Capability
The name/description match the included TypeScript scripts: the code performs token creation, fee claims and swaps on Base via Uniswap V4, which reasonably requires a wallet private key and an RPC endpoint. However, the skill metadata declares no required environment variables or primary credential while the SKILL.md and the code both require BASE_PRIVATE_KEY and a CHAIN.RPC value (imported from a missing shared module). That mismatch is a substantive coherence problem.
Instruction Scope
Runtime instructions explicitly tell users to export BASE_PRIVATE_KEY and run npx tsx scripts; the code will sign and broadcast transactions (createToken, createTokenFor, claimFees, swaps). The scripts also allow creating tokens on behalf of another creator (relayer pattern), so running them with a key could be used to route fees or create tokens that credit a third party. The code imports ../../../shared/contracts.js and ../../../shared/abis.js which are not present in the package; that means execution depends on external host-provided files and values (e.g., CHAIN.RPC), which is unexpected and broadens scope of what will be read/executed.
Install Mechanism
There is no install spec, but package.json and package-lock.json are included declaring viem and its dependencies. Running the suggested commands (npx tsx ...) will fetch/run Node packages (via npm/npx/tsx). This is a moderate risk because it pulls dependencies from npm at runtime; the package does not declare required system binaries (node, npx, tsx) in metadata.
Credentials
The skill requires a private key (BASE_PRIVATE_KEY) to sign transactions — that is expected for a launcher, but the metadata does not declare it. The code also relies on CHAIN.RPC from an external shared module (not included), meaning the skill may use RPC settings supplied by the host environment. Requesting a full private key is sensitive; the SKILL.md does not warn users to use a disposable or gas-only wallet. The relayer option (--creator) allows creating tokens 'on behalf of another creator', which could be misused to divert revenue if not properly audited.
Persistence & Privilege
The skill is not always-enabled, does not request platform-wide persistence, and does not attempt to modify other skills or agent configuration. It runs only when invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install token-launcher
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /token-launcher 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.0
Migrated from pumpclaw-base. Updated ERC-8004 agent ID to 17197. Revenue infrastructure for AI agents on Base.
v1.3.0
Update to 27 tokens, improved docs
v1.2.0
v1.2.0: Added Farcaster deploy bot info, Quick Start guide, comparison table vs Clanker/pump.fun, 3 deployment methods (skill/bot/CLI), corrected contract addresses, updated links
v1.1.0
Updated description, v1.1.0 with set-website command
v0.1.0
Initial release of the PumpClaw token launcher skill. - Instantly launch ERC20 tokens with 100% locked liquidity on Uniswap V4 (Base). - No ETH deposit needed for token creation. - Automated LP fee splits: 80% creator, 20% protocol; anyone can claim fees. - Tokens are burnable, include on-chain image/website, and support gasless approvals. - Adds command-line scripts for listing, creating, trading, and managing tokens and fees.
元数据
Slug token-launcher
版本 2.1.0
许可证
累计安装 3
当前安装数 3
历史版本数 5
常见问题

Pumpclaw 是什么?

Revenue infrastructure for autonomous AI agents on Base. Deploy ERC20 tokens with Uniswap V4 liquidity — 80% trading fees to creator, LP locked forever, $0 c... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1951 次。

如何安装 Pumpclaw?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install token-launcher」即可一键安装,无需额外配置。

Pumpclaw 是免费的吗?

是的,Pumpclaw 完全免费(开源免费),可自由下载、安装和使用。

Pumpclaw 支持哪些平台?

Pumpclaw 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pumpclaw?

由 clawd800(@clawd800)开发并维护,当前版本 v2.1.0。

💬 留言讨论