技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.2
统计：⭐ 1 · 1.4k · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：arein/onchain-test
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's documentation describes a legitimate crypto CLI that reasonably needs API keys and npm installation, but the registry metadata omits those required credentials and install details and the README/SKILL.md include inconsistent env var names and a third‑party package name — these mismatches and lack of provenance are concerning.
目的
The described capabilities (wallet balances, CEX history, market data, Polymarket) legitimately require API keys and access to user wallet addresses; that matches the SKILL.md/README functionality. However the registry metadata lists no required env vars or install steps despite the CLI clearly needing API keys and an npm package, an inconsistency worth flagging.
说明范围
SKILL.md stays within the stated purpose: it instructs the agent to run the onchain CLI, use --json, check exit codes, and read/write a config at ~/.config/onchain/config.json5. It does not instruct reading unrelated system files or exfiltrating data to unknown endpoints. It does, however, expect the agent to have or install the CLI binary.
安装机制
No install spec is declared in the registry, but the README instructs installing @cyberdrk/onchain via npm or npx. That means executing third‑party code from the npm registry (source unknown to the registry entry) if the user follows the docs — a nontrivial risk because the skill metadata did not declare this and there is no provided provenance or homepage.
证书
SKILL.md/README list multiple sensitive credentials (DeBank, Helius, Coinbase, Binance API keys/secrets, etc.) which are proportionate to the CLI's features. However the registry metadata lists no required env vars and the SKILL.md and README use inconsistent env var names for some providers (e.g., Coinbase variable names differ). Requesting CEX API keys is expected for those features, but the omission and inconsistencies are suspicious and in…
持久
The skill does not request permanent platform presence (always: false) and does not claim to modify other skills. It will store configuration and possibly API keys at ~/.config/onchain/config.json5 per its docs, which is normal for a CLI but means secrets will be stored on disk — users should verify how the CLI stores/encrypts those secrets before use.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Onchain Test」。简介：CLI for crypto portfolio tracking, market data, and CEX history. Use when the u…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arein/onchain-test/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。