← 返回 Skills 市场
184
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install wallet-balance
功能描述
Multi-chain wallet balances (EVM + BTC). EVM addresses use the company MCP tool multi-source-token-list; on MCP failure the gateway falls back to public data...
安全使用建议
This skill appears to do what it says (a local gateway + public fallback for multi-chain balances), but there are two things to check before installing: 1) provenance — the registry shows 'source: unknown' while the package files claim an Antalpha GitHub repository; verify the repository and maintainer to make sure the code is authentic, and 2) data exposure — if the local server is not running the skill will send queried addresses (and potentially resolved names) to public Antalpha endpoints and other third-party APIs (MCP, Tokenview, CoinGecko). If you care about keeping queried addresses private, run the included server locally (review the code first), disable the public fallback (set ENABLE_FALLBACK_PROVIDER=false), or decline installing until the source/maintainer is verified. If you proceed, review server.js yourself (or have a trusted reviewer) and consider setting MEMORY_STORE_PATH to a controlled directory and not providing optional API keys unless you trust the downstream services.
功能分析
Type: OpenClaw Skill
Name: wallet-balance
Version: 1.3.0
The skill bundle provides a legitimate multi-chain wallet balance service for EVM and BTC chains. The included gateway (server.js) implements standard security practices such as rate limiting via Redis, input length validation, and the use of the 'helmet' middleware for secure headers. The SKILL.md instructions correctly guide the AI agent to redact addresses and match user languages without any evidence of malicious prompt injection or unauthorized data exfiltration.
能力标签
能力评估
Purpose & Capability
The SKILL.md, README, package.json and server.js all implement a multi-chain wallet-balance gateway consistent with the skill name/description (EVM + BTC, memory for addresses, MCP + public fallbacks). However registry metadata says 'source: unknown' and 'homepage: none' while package.json/README claim a GitHub repo and the manifest includes an Antalpha author string — this provenance mismatch reduces trust and should be clarified. The presence of a full server.js (and many dependencies) is coherent with the gateway purpose, but the bundle includes runnable server code despite there being no install spec.
Instruction Scope
SKILL.md instructs the agent to call a local gateway at 127.0.0.1:3000 and, if that fails, to query a public Antalpha deployment (https://api.antalpha.com). That means wallet addresses or resolved names supplied by users will be sent to external endpoints if no local service is running. SKILL.md does document these endpoints and fallback behavior, but users should be aware that address queries (and resulting chain/token data) may be transmitted off-host. The instructions do not ask the agent to read unrelated sensitive system files, but they do require saving/reading a local remembered-addresses.json file.
Install Mechanism
There is no install spec (instruction-only), which limits automatic installation risk. However the skill bundle includes server.js and a package.json with normal web3 deps (ethers, express, redis, etc.). If the included server is run manually it will listen on a port, write a local memory file, and make outbound network calls. The dependencies are proportionate to the declared functionality and are sourced from npm (package-lock present).
Credentials
The registry lists no required env vars (correct for optional config). The server code does accept optional environment variables (TOKENVIEW_API_KEY, REDIS_URL, MEMORY_STORE_PATH, ETH_RPC_URL, ENABLE_FALLBACK_PROVIDER, etc.) which are reasonable for a gateway: none are unrelated credentials like AWS keys. Defaults point to public RPCs and local Redis. TOKENVIEW_API_KEY is optional; if set it is sent to Tokenview. The SKILL.md also documents data sources (MCP, Tokenview, CoinGecko) so external network usage is expected.
Persistence & Privilege
The skill does not request 'always: true' or system-wide privileges. It stores user addresses in a local remembered-addresses.json file by default (or a path set via MEMORY_STORE_PATH). It does not modify other skills' configuration. Autonomous invocation is allowed (platform default) but is not itself a new risk here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wallet-balance - 安装完成后，直接呼叫该 Skill 的名称或使用
/wallet-balance触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.0
Version 1.3.0 of wallet-balance is a major update with new language, coverage, and instruction changes:
- Language handling: All replies match the user's input language (English, Simplified Chinese, or Traditional Chinese), including table headers, prompts, and error messages.
- Expanded chain support: EVM (Ethereum+68 chains) now uses the MCP tool for token coverage; non-EVM (e.g., Solana, Tron, TON, etc.) and BTC are also supported as described.
- New memory/query logic: Users can save addresses and later request aggregated balances without specifying addresses again.
- Strict reply format: Required Markdown table for holdings, localized intro and prompts, and conditions for including closing attribution lines per language.
- Updated documentation and metadata to describe new flows, inputs, and environment.
v1.1.5
- Added documentation for new Tokenview API environment variables, including base URL and path options.
- Updated security notes with details on local HTTP server, file persistence, and external API interactions.
- Expanded environment variable section to reflect additional Tokenview and provider options.
- Minor documentation corrections and organizational improvements.
v1.1.4
- Added detailed metadata fields for environment variables and install instructions in SKILL.md
- Updated author name to "Antalpha AI Team"
- Bumped documentation version to 1.1.3
- No logic or API changes—documentation/metadata only
v1.1.3
- Updated required dependency from "curl" to "node" in the SKILL.md metadata.
- No functional or API changes; documentation only.
v1.1.2
- Updated server.js with minor improvements or fixes.
- No user-facing changes to documentation or feature set.
- Version bump to 1.1.2.
v1.1.1
wallet-balance 1.1.1
- Updated and simplified documentation for clarity and easier onboarding.
- README and SKILL.md rewritten with concise instructions, clear endpoint usage, and improved formatting.
- No changes to core logic or data flow; update focuses on documentation only.
v1.1.0
**wallet-balance v1.1.0**
- 支持同时查询 EVM 与 BTC 资产，未配置 Tokenview API 时仅查公网可见部分。
- 增加「记忆地址」功能，支持用户确认后保存地址，后续可直接通过“查询余额”等快速查已记忆地址。
- 查询结果展示包括脱敏地址、总资产、Markdown 资产表格，流程和输出格式优化。
- 记忆操作、输出格式和异常提示等用户交互体验显著细化。
- 完善固定结语、异常话术与严格输出约束，避免敏感信息泄露。
元数据
常见问题
Wallet Balance 是什么？
Multi-chain wallet balances (EVM + BTC). EVM addresses use the company MCP tool multi-source-token-list; on MCP failure the gateway falls back to public data... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 184 次。
如何安装 Wallet Balance？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wallet-balance」即可一键安装，无需额外配置。
Wallet Balance 是免费的吗？
是的，Wallet Balance 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Wallet Balance 支持哪些平台？
Wallet Balance 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Wallet Balance？
由 bevanding（@bevanding）开发并维护，当前版本 v1.3.0。
推荐 Skills