← 返回 Skills 市场
162
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install token-scan
功能描述
Scan token contract security risk and return a structured summary including score, tax, holder concentration, and LP lock status. Supported chains are bsc, e...
安全使用建议
This skill appears to do exactly what it says: it sends the chain and contract address to CertiK's public token-scan API and returns JSON. Before installing, consider: (1) network calls to open.api.certik.com will reveal which contract addresses you query — if that is sensitive for your organization, avoid using it; (2) the script prints raw JSON, so the agent should format/sanitize outputs before exposing them to users; (3) SKILL.md recommends validating address formats but the bundled script does not — ensure the agent performs any required validation; (4) no credentials are requested, so there is no secret-exfiltration risk from this skill itself, but third-party API logging/policy is out of scope. Overall the pieces are coherent and proportionate.
功能分析
Type: OpenClaw Skill
Name: token-scan
Version: 1.0.0
The skill is a legitimate tool for scanning cryptocurrency token contracts for security risks using the CertiK Token Scan API (open.api.certik.com). The Python script (scripts/token_scan.py) and agent instructions (SKILL.md) are well-structured, perform standard API requests, and show no evidence of malicious intent, data exfiltration, or unauthorized command execution.
能力评估
Purpose & Capability
Name/description match the implementation: the bundled script and SKILL.md call the public CertiK token-scan API (open.api.certik.com) to retrieve a token risk scan. There are no unrelated credentials, binaries, or services requested.
Instruction Scope
SKILL.md restricts usage to supported chains and instructs validation of addresses and use of the bundled Python script (with a curl fallback). The Python script itself simply performs an HTTP GET and does not perform address-format validation; the SKILL.md places some validation responsibility on the agent. This is a minor mismatch but not malicious.
Install Mechanism
No install spec — instruction-only with a small included Python script. No downloads from arbitrary URLs, no archives extracted, and nothing is written to disk beyond executing the provided script. Low install risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. It makes outbound HTTPS calls to a single third-party endpoint (CertiK). The network access is proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. Autonomous invocation is allowed but is the platform default; this skill does not request elevated persistence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install token-scan - 安装完成后，直接呼叫该 Skill 的名称或使用
/token-scan触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of token-scan skill.
- Provides structured security risk analysis for token contracts on 11 supported chains (bsc, eth, solana, arbitrum, base, polygon, avax, tron, ton, plasma, sui).
- Returns risk score, alert count, alert severity, token tax info, holder concentration, and LP lock status.
- Alerts are sorted by severity, with top 8 highest-priority items shown if more exist.
- Interprets real buy/sell tax when available and clarifies difference from deduction factors.
- Explains supported chain/address formats and enforces input validation.
- Reports scan status (in progress, success, or error) clearly to the user.
元数据
常见问题
Token Scan 是什么？
Scan token contract security risk and return a structured summary including score, tax, holder concentration, and LP lock status. Supported chains are bsc, e... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 162 次。
如何安装 Token Scan？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install token-scan」即可一键安装，无需额外配置。
Token Scan 是免费的吗？
是的，Token Scan 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Token Scan 支持哪些平台？
Token Scan 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Token Scan？
由 CertiK（@certik-ai）开发并维护，当前版本 v1.0.0。
推荐 Skills