技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 390 · 3 current installs · 3 all-time installs
⭐ 0
安装量（当前） 3
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：aviclaw/debridge-mcp
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's stated purpose (connecting to deBridge MCP) is plausible, but there are multiple inconsistencies and missing details (repo origin mismatch, undeclared runtime requirements, unclear signing/credential handling, and hard-coded paths) that warrant caution before installing or running the code.
目的
The SKILL.md and setup.sh instruct cloning and running a Node-based MCP server (git clone, npm install, npm run build, node dist/index.js) but the skill metadata declares no required binaries or credentials. That is inconsistent: node/npm should be declared. Additionally, _meta.json points to a repo under aviclaw while the install instructions and setup.sh clone github.com/debridge-finance/debridge-mcp — the origin is ambiguous.
说明范围
Instructions direct the agent/operator to download and run external code as a local adapter and to modify ~/.openclaw/openclaw.json to launch it via stdio. The SKILL.md does not explain how transaction signing or wallet/private-key access is handled (critical for cross-chain swaps). Running a third-party server locally can give the skill broad ability to initiate blockchain transactions if signing is available — but the workflow for signing/au…
安装机制
Installation is a simple git clone from GitHub and npm build (no packaged installer). The GitHub URL (debridge-finance) is an expected host for this project, which reduces risk versus a random URL, but it still results in arbitrary code being written and executed locally (npm install, npm run build, node). The skill registry did not provide an install spec, so setup.sh bundled with the skill is the only installer; that script performs cloning …
证书
No environment variables or credentials are declared, yet the feature (executing swaps/transfers) normally requires signing transactions or proxying through wallets or RPC endpoints. The SKILL.md gives no guidance on how keys are provided or how signing requests are routed, which is a material omission. The setup script reads and backs up ~/.openclaw/openclaw.json (expected) and references a hard-coded installation path (/home/ubuntu) in the e…
持久
The skill does not request forced persistence (always: false) and setup.sh only suggests adding an adapter entry and backing up the OpenClaw config; it does not autonomously modify plugin-enabled flags or system-wide settings beyond the user's OpenClaw config backup step. Autonomous invocation remains possible by default (platform behavior) but is not elevated by the skill metadata.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Debridge Mcp」。简介：Enable non-custodial cross-chain crypto swaps and transfers with optimized rout…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aviclaw/debridge-mcp/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。