技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.0.1
统计：⭐ 1 · 1.7k · 8 current installs · 8 all-time installs
⭐ 1
安装量（当前） 8
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：arein/test
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The SKILL.md describes a crypto CLI that reasonably needs exchange and API keys, but the skill metadata does not declare any required binaries, install steps, or environment variables — an internal mismatch that warrants caution.
目的
The name/description (crypto portfolio, CEX history, market data) matches the commands in SKILL.md, but the skill metadata declares no required binaries, no required environment variables, and no install. SKILL.md clearly expects an external 'onchain' CLI binary and multiple API keys (DeBank, Helius, Coinbase, Binance). That mismatch (instructions require a CLI and secrets but metadata lists none) is incoherent.
说明范围
Runtime instructions tell the agent to run 'onchain <command>' extensively, read/write a config file at ~/.config/onchain/config.json5, and use API keys. The instructions do not ask the agent to exfiltrate unrelated files, but they do assume a CLI and local config exist; there is no guidance about where that binary comes from. The interactive 'onchain setup' and saved-wallet behavior imply persistent local configuration that may contain secrets.
安装机制
There is no install spec (instruction-only), which lowers file-write risk, but is inconsistent with the SKILL.md that relies on an external 'onchain' CLI. If the runtime does not already have the binary, the instructions are non-functional. The absence of a provenance/source or install mechanism for the CLI is a red flag (unknown origin).
证书
SKILL.md lists multiple sensitive API keys (DEBANK_API_KEY, HELIUS_API_KEY, COINBASE_API_KEY/SECRET, BINANCE_API_KEY/SECRET) which are proportionate to crypto/CEX functionality, but the skill metadata declares no required env vars. That divergence is noteworthy. Also, CEX API secrets can grant trading/withdrawal access if created with broad permissions — the SKILL.md does not instruct to prefer read-only keys or warn about key permissions.
持久
The skill is not always-enabled and does not request system-level persistence. It references a per-user config path (~/.config/onchain/config.json5) which is expected for a CLI and is scoped to the user's home; no evidence the skill modifies other skills or system-wide settings.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Test」。简介：CLI for crypto portfolio tracking, market data, and CEX history. Use when the u…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arein/test/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。