技能详情（站内镜像，无评论）
作者：Ana @anajuliabit
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.1
统计：⭐ 0 · 1.2k · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：anajuliabit/mamo
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill appears to implement the advertised DeFi CLI, but its metadata omits required environment variables (private key), it reads/writes local config, and — if you provide a wallet private key in the environment — the agent (which can invoke the skill autonomously) can sign and submit transactions; these mismatches and the high-impact credential usage warrant caution.
目的
The code and documentation implement a CLI to deploy/operate per-user Mamo strategy contracts on Base and to query APYs — which matches the skill name/description. However, the skill metadata in the registry claims no required env vars while both SKILL.md/README and the code require a private key (MAMO_WALLET_KEY) and optionally MAMO_RPC_URL. That omission is an incoherence between declared requirements and actual needs.
说明范围
SKILL.md instructs installing and exporting a private key (MAMO_WALLET_KEY) and running the CLI commands (create, deposit, withdraw, status). The runtime code will: load a .env file from the script directory if present, read MAMO_WALLET_KEY and MAMO_RPC_URL from environment, sign SIWE messages and on-chain transactions, call Mamo backend endpoints (mamo-queues.moonwell.workers.dev, mamo-indexer.moonwell.workers.dev), and read/write ~/.config/m…
安装机制
No remote install script is embedded in the skill bundle; SKILL.md instructs running npm install and executing the included Node script. All dependencies are standard npm packages (viem, siwe, commander, dotenv). There are no downloads from obscure URLs or archives in the install spec. Risk from installation itself is low, but running npm install pulls third-party packages as usual.
证书
The functionality legitimately requires a signing key (MAMO_WALLET_KEY) and optionally an RPC URL, but the registry metadata lists no required env vars and the skill manifest did not declare the private key as the primary credential. Asking for a raw private key (and providing code that will read a .env file in the script dir) is expected for a CLI that signs txs, but is high-risk and should be declared clearly. The code stores auth tokens loc…
持久
The skill writes persistent configuration to ~/.config/mamo (strategies.json, auth.json) and may store API auth tokens returned from the backend. always: false (not force-included). The skill can be invoked autonomously (platform default). If you set MAMO_WALLET_KEY in the environment for the agent, the skill gains the ability to sign and submit transactions autonomously — a meaningful risk that depends on whether you allow the agent to run sk…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Mamo」。简介：Interact with Mamo DeFi yield strategies on Base (Moonwell). Deposit/withdraw U…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/anajuliabit/mamo/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: mamo
description: Interact with Mamo DeFi yield strategies on Base (Moonwell). Deposit/withdraw USDC, cbBTC, MAMO, or ETH into automated yield strategies. Check APY rates and account status.
version: 1.0.0
metadata: {"clawdbot":{"emoji":"🐮","category":"defi","requires":{"bins":["node"]}}}
---
# Mamo — DeFi Yield Aggregator (Moonwell on Base)
Mamo is a DeFi yield aggregator built by Moonwell on Base chain. It deploys per-user smart contracts that split deposits between Moonwell core markets and Morpho vaults for optimized yield, with auto-compounding of rewards.
**Chain:** Base (8453)
**Strategies:** USDC stablecoin, cbBTC lending, ETH lending, MAMO staking
## Setup
```bash
cd ~/clawd/skills/mamo/scripts # or wherever this skill lives
npm install
export MAMO_WALLET_KEY=0x... # wallet private key
export MAMO_RPC_URL=https://... # optional, defaults to Base public RPC
```
## Commands
```bash
# Create a yield strategy (deploys your personal strategy contract via on-chain factory)
node mamo.mjs create usdc_stablecoin
node mamo.mjs create cbbtc_lending
node mamo.mjs create eth_lending
# Deposit tokens (approve + deposit to your strategy contract)
node mamo.mjs deposit 100 usdc
node mamo.mjs deposit 0.5 cbbtc
# Withdraw tokens
node mamo.mjs withdraw 50 usdc
node mamo.mjs withdraw all cbbtc
# Account overview — wallet balances + strategy positions
node mamo.mjs status
# Current APY rates
node mamo.mjs apy
node mamo.mjs apy usdc_stablecoin
```
## How It Works
1. **Create strategy** → Calls the on-chain StrategyFactory to deploy a personal proxy contract owned by your wallet
2. **Deposit** → CLI approves token spend, then calls `deposit(amount)` on your strategy contract
3. **Yield accrues** → Strategy splits funds between Moonwell + Morpho, auto-compounds rewards via CowSwap
4. **Withdraw** → Only the owner (your wallet) can withdraw. Funds go directly to your wallet
Strategy addresses are stored locally in `~/.config/mamo/strategies.json` (the on-chain registry may not be updated for user-created strategies).
## Key Addresses
| Token | Address |
|-------|---------|
| USDC | `0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913` |
| cbBTC | `0xcbB7C0000aB88B473b1f5aFd9ef808440eed33Bf` |
| MAMO | `0x7300b37dfdfab110d83290a29dfb31b1740219fe` |
| Registry | `0x46a5624C2ba92c08aBA4B206297052EDf14baa92` |
## Security
- Use a **dedicated hot wallet** — not your main holdings
- Only deposit what you're comfortable having in a hot wallet
- Store `MAMO_WALLET_KEY` in env vars, never in committed files
- All transactions are simulated before sending