← 返回 Skills 市场
xstocks-beta
作者
Manuel Hidalgo
· GitHub ↗
· v0.0.3
· MIT-0
130
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install xstocks-beta
功能描述
Search, list, and resolve xStocks tokens on Solana mainnet, and list wallet holdings; use with Jupiter for price and trading functionality.
安全使用建议
What to consider before installing: the code correctly provides a local, hardcoded xStocks catalog and safe search utilities — that part is coherent. However the runtime instructions tell the agent to perform live swaps and to sign/broadcast transactions immediately after a single confirmation, yet the skill does not include or declare any wallet integration or credential requirements. That mismatch could lead to accidental fund transfers or unclear handling of private keys. If you plan to use it for trading: (1) do not enable autonomous invocation for this skill; require explicit manual steps and confirmations; (2) only allow it to run the read-only search scripts unless you have a controlled, audited wallet integration (and prefer an explicit documented mechanism for signing); (3) audit the hardcoded mint addresses against the official xStocks source before transacting; (4) prefer the agent to return the mint address and let you perform swaps with your own wallet tools rather than having the agent perform signing; (5) ask the author for explicit documentation of how signing is intended to work (what tooling, how credentials are supplied and stored) — that information would materially change this assessment.
功能分析
Type: OpenClaw Skill
Name: xstocks-beta
Version: 0.0.3
The skill provides a hardcoded catalog of Solana token addresses and search functionality. While the Python code in `scripts/search.py` and `scripts/xstocks/data.py` is benign and lacks network or file system access, the `SKILL.md` file contains instructions that function as a behavioral prompt injection. Specifically, it commands the AI agent to 'execute the entire buy flow immediately in one pass' and 'Do NOT stop after confirming,' explicitly telling the agent to bypass further user input or confirmation pauses. This instruction to override standard agent safety loops and confirmation checks is a risky capability that could lead to unintended financial transactions.
能力评估
Purpose & Capability
The package and SKILL.md primarily provide a hardcoded catalog and local search utilities (104 tokens), which matches the name's 'search/list/resolve' claim. However the description and SKILL.md also claim the ability to 'list wallet holdings' and perform trading flows. The included code implements only catalog/search functionality and contains no wallet, network, or trading integration. Claiming wallet-holding listing and transaction execution without those components is incoherent.
Instruction Scope
SKILL.md instructs the agent that once the user confirms a buy amount, it must 'execute the entire buy flow immediately in one pass' (resolve mint → get Jupiter quote + swap → sign & broadcast). It references using Jupiter endpoints and external signing tools (lobster.cash) but gives no concrete, declared way to obtain signing credentials or to call those services safely. The instruction to never pause between confirmation and execution raises risk (accidental/automatic fund transfers) and grants broad discretionary operational power to the agent beyond the local search scripts.
Install Mechanism
No install spec or external downloads are present; all included code is local and the catalog is hardcoded. This is low-risk from an install/code-pull perspective — nothing is fetched from external URLs during install.
Credentials
The skill declares no required environment variables or credentials, yet runtime instructions require access to wallet signing tools and remote APIs (Jupiter, lobster.cash). There is a clear mismatch: trading and signing need private keys/authentication, which are neither requested nor scoped here. That omission makes it unclear how the agent should obtain or use credentials and increases the risk of accidental exposure if the agent tries to use any available secret material.
Persistence & Privilege
The skill is not force-included (always:false) and model invocation is allowed (default). While that is normal, the combination of autonomous invocation and the SKILL.md's instruction to execute swaps immediately on confirmation increases risk: if the agent runs autonomously or misinterprets confirmation, it could trigger transactions. The skill does not request higher persistence or system-wide config changes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xstocks-beta - 安装完成后，直接呼叫该 Skill 的名称或使用
/xstocks-beta触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.0.3
- Clarified buy flow: once the user confirms an amount, execute the entire buy process immediately without pausing or waiting for further prompts.
- Added explicit instruction not to wait after confirmation—confirmation means immediate execution.
- Emphasized not to use the Jupiter Ultra endpoints for swaps.
- Updated documentation to reinforce urgent, one-pass transaction execution after user confirmation.
- No functional code changes; this update is documentation only.
v0.0.2
Version 0.0.2 — Major simplification and switch to hardcoded catalog
- Switched from API-driven to hardcoded list of 104 xStocks tokens; no network access required.
- Replaced multiple scripts with a single unified search tool (`scripts/search.py`) for listing, filtering, and reverse lookup.
- Removed wallet and balance listing scripts; skill now focuses on token discovery and mint resolution.
- SKILL.md and documentation updated to reflect new usage and simplified workflows.
- For trading and price discovery, users now always combine with Jupiter and use their own wallet tools.
v0.0.1
xstocks-beta 0.0.1 – Initial Release
- Introduces a search engine for discovering, listing, and resolving xStock tokens on Solana mainnet.
- Provides scripts to list available xStocks, filter/search tokens, and resolve a mint address to a xStock.
- Adds a tool to list xStock holdings for a given Solana wallet.
- Designed to be used with Jupiter for price discovery and lobster.cash for wallet/signing; direct trading is not supported in this skill.
- Emphasizes careful output analysis and combining with other extensions for enriched workflows.
- Includes extensive CLI options, structured logging, and caching for efficiency.
元数据
常见问题
xstocks-beta 是什么？
Search, list, and resolve xStocks tokens on Solana mainnet, and list wallet holdings; use with Jupiter for price and trading functionality. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 130 次。
如何安装 xstocks-beta？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xstocks-beta」即可一键安装，无需额外配置。
xstocks-beta 是免费的吗？
是的，xstocks-beta 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
xstocks-beta 支持哪些平台？
xstocks-beta 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 xstocks-beta？
由 Manuel Hidalgo（@manu-xmint）开发并维护，当前版本 v0.0.3。
推荐 Skills