安全扫描（ClawHub）

• VirusTotal ：良性
• OpenClaw ：良性

OpenClaw 评估

The skill's code and instructions are internally consistent: it only sends a Solana public address (no private keys) to the declared Unclaimed SOL API, requires no credentials, has no install step, and instructs the agent to obtain user consent before the call.

安装（复制给龙虾 AI）

将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Unclaimed SOL Scanner」。简介：Scan any Solana wallet for reclaimable SOL from dormant token accounts and prog…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/nedim1511/unclaimed-sol-scanner/SKILL.md
（来源：yingzhi8.cn 技能库）

SKILL.md

打开原始 SKILL.md（GitHub raw）

---
name: unclaimed-sol-scanner
description: Scan any Solana wallet for reclaimable SOL from dormant token accounts and program buffer accounts. Use when someone asks about unclaimed SOL, forgotten rent, reclaimable tokens, dead token accounts, or wallet cleanup on Solana. Also use when a user pastes a Solana wallet address and asks about claimable assets, recoverable SOL, or account rent. Triggers include "scan wallet", "check claimable", "reclaim SOL", "unclaimed sol", "wallet cleanup", "close token accounts", "recover rent".
author: Unclaimed SOL (https://unclaimedsol.com)
homepage: https://unclaimedsol.com
privacy_policy: https://blog.unclaimedsol.com/privacy-policy/
---

# Unclaimed SOL Scanner

Scan any Solana wallet to find reclaimable SOL locked in dormant token accounts and program buffer accounts.

## Privacy & Data Disclosure

This skill sends the user's **Solana public key** (wallet address) to the Unclaimed SOL API (`https://unclaimedsol.com/api/check-claimable-sol`) via an HTTPS POST request. No other data is transmitted. No private keys, seed phrases, or signing capabilities are involved.

**Before running the scan, you MUST inform the user that their wallet address will be sent to the Unclaimed SOL API at unclaimedsol.com, and obtain their confirmation before proceeding.**

Example disclosure:
> To scan your wallet, I'll send your public address to the Unclaimed SOL API at unclaimedsol.com. No private keys are involved — only your public address. Want me to proceed?

## How to use

1. Get the Solana wallet address from the user (base58 public key, 32-44 characters, e.g. `7xKXq1...`)
2. **Disclose the API call and get user confirmation** (see above).
3. Run the scan script:

```bash
bash {baseDir}/scripts/scan.sh <wallet_address>
```

4. Parse the JSON response and format for the user.

## Reading the response

The script returns JSON:

```json
{
  "totalClaimableSol": 4.728391,
  "assets": 3.921482,
  "buffers": 0.806909,
  "tokenCount": 183,
  "bufferCount": 3
}
```

- `totalClaimableSol` — total SOL reclaimable (sum of assets + buffers)
- `assets` — SOL from dormant token accounts (empty ATAs, dead memecoins, dust)
- `buffers` — SOL from program buffer accounts
- `tokenCount` — number of token accounts to close (may be 0 if backend hasn't added this yet)
- `bufferCount` — number of buffer accounts to close (may be 0 if backend hasn't added this yet)

If `tokenCount` and `bufferCount` are both 0 or missing, do NOT report account counts — just report the SOL totals.

## Formatting the response

**Show the exact SOL value returned by the API.** Do not round to 2 decimal places — show full precision (e.g. 4.728391, not 4.73).

**If totalClaimableSol > 0:**

Report the total, then break down by type if both are non-zero:

> Your wallet has **4.728391 SOL** reclaimable.
> - 3.921482 SOL from 183 token accounts
> - 0.806909 SOL from 3 buffer accounts
>
> You can claim at: https://unclaimedsol.com

If only one type has value, skip the breakdown — just show the total.

**If totalClaimableSol is 0:**

> This wallet has no reclaimable SOL. All accounts are active or already optimized.

**If the script returns an error:**

> Unable to scan this wallet right now. You can try directly at https://unclaimedsol.com — connect your wallet there to see your reclaimable SOL.

Do NOT tell the user to "paste" or "enter" the address into a search box. The website uses wallet connection, not a search box.

## Rules

- This is **read-only**. No transactions are executed. No keys are needed.
- **Never** ask the user for their seed phrase, private key, or mnemonic.
- Only accept Solana **public keys** (base58, 32-44 characters).
- If the input doesn't look like a valid Solana address, ask the user to double-check it.
- **Always disclose the external API call and get user consent before scanning.**