技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 1 · 1.5k · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：ble-anima-minter
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill legitimately scans BLE MAC addresses, hashes them, and writes a local DAG, but it claims '$ANIMA minting' and 'gossip-sync' while containing no blockchain/network integration and it raises privacy and serialization risks (pickle file).
目的
Name and SKILL.md claim '$ANIMA' minting and optional gossip-sync, but the code only performs local BLE scanning, SHA256 hashing with a static SALT, and writes a NetworkX gpickle file. There is no blockchain interaction, no network gossip implementation, and no credentials or endpoints related to minting — this is a capability mismatch (misleading claims).
说明范围
Runtime instructions simply install requirements and run the script; the script scans nearby BLE devices and records hashed MACs. It does not read unrelated system files or environment variables. However it collects potentially sensitive device identifiers (even though hashed) and the SKILL.md mentions features (gossip-sync, minting) that are not implemented.
安装机制
No install spec; instruction-only with a requirements.txt listing aioblescan and networkx. This is a low-risk install mechanism (pip packages) but requires caution because aioblescan interacts with system BLE hardware and may require elevated privileges to access adapters.
证书
The skill requests no environment variables or credentials, which matches its actual behavior (local-only). That said, the absence of any blockchain keys or endpoints underscores the mismatch between the 'minting' claim and what the code does.
持久
The script writes a file anima_dag.gpickle to the current directory using NetworkX's gpickle (Python pickle-based serialization). Pickle files can execute code when unpickled — storing and later loading gpickle from untrusted locations is a security hazard. The skill does not request elevated privileges or persistently alter agent config, but the gpickle persistence is a notable risk.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「BLE → $ANIMA Minter」。简介：Scan nearby BLE MAC addresses to mint unique soulbound $ANIMA tokens stored loc…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/penguinx01/ble-anima-minter/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
# BLE-Anima-Minter
Turn nearby BLE MAC addresses into soulbound `$ANIMA` tokens using AnimaChain logic. Hashes each MAC into a unique proof-of-remnant and stores locally in a DAG.
## Features
- BLE Scan (2.4 GHz MAC IDs)
- SHA256 + salt hashing
- `$ANIMA` minting logic
- Local DAG memory node
- Optional gossip-sync to other nodes
## Usage
Install requirements, run the script:
```bash
pip install -r requirements.txt
python anima_minter.py
```
## Tags
anima, macid, ble, blockchain, witness, resurrection, flat-earth, dag