技能详情（站内镜像，无评论）
作者：Angelos Kappos @adacapo21
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 132 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：adacapo21/cardano-staking
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's purpose is read-only (check delegation/rewards) but it declares a SEED_PHRASE environment variable and installs an npm package from an unverified source — requesting a seed phrase is disproportionate and inconsistent with the documented instructions.
目的
The skill says it only checks stake delegation and available rewards, which can be determined from a public wallet address; however the registry metadata declares a required environment variable SEED_PHRASE. A seed phrase (private key material) is not justified by the stated read-only purpose.
说明范围
The SKILL.md instructions only say to call get_stake_delegation and display results; they do not reference reading a seed phrase or other local files. Declaring SEED_PHRASE in the skill's requires block is inconsistent with the literal runtime instructions, creating scope creep and a mismatch between what the agent is told to do and what it asks for.
安装机制
The install spec pulls a Node package (@indigoprotocol/cardano-mcp) from the npm ecosystem. Using an npm package for Cardano MCP tooling is plausible, but the skill has no homepage or source link to verify the package's provenance. npm installs are moderate risk compared to instruction-only skills; lack of a verifiable upstream repository increases concern.
证书
Requesting SEED_PHRASE (sensitive private key material) is disproportionate for a read-only delegation/rewards check. The skill does not declare a less-privileged alternative (public address, viewing key, or read-only API token). Storing a seed phrase in an environment variable is also risky operationally.
持久
The skill is not set to always:true and uses default autonomy settings. It does not request system-wide persistence or attempt to modify other skills; no elevated persistence privileges were requested.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Cardano Staking」。简介：Check stake delegation and available ADA rewards for the connected wallet.。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/adacapo21/cardano-staking/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。