← 返回 Skills 市场
2602
总下载
3
收藏
0
当前安装
12
版本数
在 OpenClaw 中安装
/install zyfai-sdk
功能描述
Earn yield on any Ethereum wallet on Base, Arbitrum, and Plasma. Use when a user wants passive DeFi yield on their funds. Deploys a non-custodial determinist...
安全使用建议
Do not paste or enter your private key into the agent or skill UI unless you've independently audited the SDK and service. Before installing, ask the skill author to: (1) declare required env vars (API_KEY, any signer/private-key variables) in the registry metadata, (2) provide the SDK source repo and npm package name so you can review code and contract addresses, and (3) provide audits or verification that session keys cannot withdraw to arbitrary addresses. Prefer using KMS/hardware wallets or Wallet‑as‑a‑Service instead of raw private keys; test on a small amount or a testnet first; verify the sdk.zyf.ai domain ownership and TLS; and consider disabling autonomous invocation or requiring explicit user confirmation before the agent uses this skill to perform on‑chain transactions.
功能分析
Type: OpenClaw Skill
Name: zyfai-sdk
Version: 1.0.11
The skill bundle provides a legitimate integration for the Zyfai DeFi yield protocol, allowing an AI agent to manage deposits and automated yield optimization on Ethereum L2s like Base and Arbitrum. The Skill.md file contains comprehensive documentation, API references, and security best practices (such as recommending KMS for key management and requiring explicit user consent for cross-chain operations). While the skill involves high-risk activities like handling private keys and financial transactions, these are essential to its stated purpose, and there is no evidence of malicious intent, data exfiltration, or prompt injection attacks.
能力标签
能力评估
Purpose & Capability
The name/description (yield on Base/Arbitrum/Plasma) match the SKILL.md instructions, but the skill registry lists no required env vars/credentials while the instructions explicitly use an API key and a raw PRIVATE_KEY for server agents. That omission is an incoherence — a yield SDK legitimately needs an API key and a signer, so the declared metadata should reflect that.
Instruction Scope
SKILL.md tells agents how to obtain and use an API key, how to connect wallets, how to deploy subaccounts (Safes), create session keys, and use a raw PRIVATE_KEY from process.env. It does not instruct reading unrelated system files, but it does instruct handling highly sensitive secrets and performing on‑chain actions (deploy, rebalance, withdraw). The instructions do not include safeguards or explicit limits on session keys beyond a claim that they "cannot withdraw to other addresses" — that should be verified in code/contracts.
Install Mechanism
This is instruction-only (no install spec or code files). It suggests running `npm install @zyfai/sdk viem`, which is expected for a JS SDK. No download-from-URL or archive install is embedded in the skill metadata.
Credentials
The SKILL.md requires an API key and shows a server example using process.env.PRIVATE_KEY, yet the skill metadata declares no required environment variables or primary credential. Requesting raw private keys (even in examples) is a high-sensitivity action; the metadata should declare such requirements and justify them. The presence of an API key + private key requirement is proportionate to the stated function but the omission from metadata is suspicious.
Persistence & Privilege
always is false and disable-model-invocation is false (normal). Autonomous invocation combined with access to API keys or private keys increases blast radius if the agent is allowed to call the skill without explicit user consent. The skill itself doesn't request system-wide persistence or other skills' configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zyfai-sdk - 安装完成后，直接呼叫该 Skill 的名称或使用
/zyfai-sdk触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.11
Zyfai SDK v1.0.11 introduces a major update: adds simple Vault mode for instant yield, alongside Smart Wallet.
- Two modes available: Vault (simple yield on Base, USDC only) and Smart Wallet (multi-chain, advanced).
- Vault: one-step deposit/withdraw, no setup; new SDK methods `vaultDeposit`, `vaultWithdraw`, `vaultClaim`, and `getVaultShares`.
- Smart Wallet flow unchanged—still supports custom strategies and multi-chain deployment.
- Documentation now clearly compares Vault vs. Smart Wallet with table and usage instructions.
- Improved clarity on wallet connection, supported assets, and security recommendations.
v1.0.10
- Renamed documentation file from SKILL.md to Skill.md.
- Documentation received minor text changes for improved clarity and conciseness.
- Example SDK usage and instructions remain unchanged.
v1.0.9
zyfai-sdk 1.0.9 Changelog
- Updated documentation to clarify that subaccounts (Safe smart wallets) are now deterministic.
- Minor text edits for clearer explanations and improved flow in the SKILL.md.
- No code or file changes—documentation update only.
v1.0.8
- Added support for connecting to Zyfai using a wallet provider (e.g., MetaMask), a viem WalletClient, or a raw private key.
- Updated documentation to recommend secure wallet connection methods, including integration with AWS KMS, GCP, Turnkey, Privy, or other Wallet-as-a-Service solutions for production.
- Added explicit security guidance and a comparison table for connection options.
- Clarified instructions and examples for connecting via wallet providers, WalletClients, and private keys.
- No functional changes to SDK logic; documentation improvements only.
- Added .DS_Store file (no effect on functionality).
v1.0.7
zyfai-sdk 1.0.7 Changelog
- Added instructions for agents to create an API key programmatically via a POST endpoint, removing the need for manual key generation.
- Updated the prerequisites section to include details on automated API key creation and emphasize secure storage of generated keys.
- Example usage and SDK initialization now mention a referralSource parameter.
- No code/API changes; documentation improvements only.
v1.0.6
- Added explicit instructions to always verify session key activation with getUserDetails().user.hasActiveSessionKey after calling createSessionKey, including a retry and failure-handling process.
- Updated code examples and main setup flow to include session key activation checks and error handling.
- Expanded API reference with updateUserProfile for updating strategy, protocols, splitting, and cross-chain settings.
- Improved clarity on the importance of session key activation for automated yield optimization.
v1.0.5
zyfai-sdk v1.0.5
- Added registerAgentOnIdentityRegistry(smartWallet, chainId) to the API reference, enabling agent registration on ERC-8004 Identity Registry.
- No other functional or documentation changes detected.
v1.0.4
zyfai-sdk 1.0.4
- Added the `getAPYPerStrategy` method to the API, allowing users to retrieve APY data for conservative and aggressive strategies.
- No other changes detected; documentation and flow remain consistent with previous versions.
v1.0.3
No user-facing or code changes detected in this version.
- No modifications identified in SKILL.md or other files.
- Version remains consistent with previous release.
v1.0.2
- Update clarifies that all SDK methods must use the user's EOA address, not the subaccount/Safe address, and always with an EOA private key available to the agent.
- Adds troubleshooting section with solutions for common errors (address mismatch, "deposit address not found", and "invalid signature").
- Expands usage examples for deposit and withdrawal, showing recommended patterns for handling EOA addresses and private keys.
- Updates terminology to consistently use "Zyfai" and clarifies agent responsibilities in the workflow.
- No file/code changes; documentation improvements only.
v1.0.1
- Updated description to emphasize passive DeFi yield for any Ethereum wallet.
- Rewrote documentation for clearer onboarding and step-by-step usage.
- Simplified terminology: "subaccount" now refers to the non-custodial Safe wallet.
- Added detailed API reference table for easier integration.
- Streamlined examples and security notes for better understanding.
- No code or file changes; documentation and usage instructions only.
v1.0.0
zyfai-sdk 1.0.0 initial release:
- Deploy non-custodial DeFi Safe smart wallets on Arbitrum, Base, and Plasma.
- Enable automated yield optimization with strategy selection ("conservative" or "aggressive").
- Supports depositing and withdrawing funds, including partial withdrawals.
- Automated rebalancing via session keys, restricted to the Zyf AI ecosystem.
- Deterministic wallet addresses for the same EOA across supported chains.
- Comprehensive documentation and usage examples provided.
元数据
常见问题
Zyfai Yield Automation 是什么？
Earn yield on any Ethereum wallet on Base, Arbitrum, and Plasma. Use when a user wants passive DeFi yield on their funds. Deploys a non-custodial determinist... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2602 次。
如何安装 Zyfai Yield Automation？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zyfai-sdk」即可一键安装，无需额外配置。
Zyfai Yield Automation 是免费的吗？
是的，Zyfai Yield Automation 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Zyfai Yield Automation 支持哪些平台？
Zyfai Yield Automation 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Zyfai Yield Automation？
由 Paul（@pauldefi）开发并维护，当前版本 v1.0.11。
推荐 Skills