Helius x DFlow
v1.0.0Build Solana trading applications combining DFlow trading APIs with Helius infrastructure. Covers spot swaps (imperative and declarative), prediction markets...
⭐ 0· 212·0 current·0 all-time
byEvan@0xichigo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Helius x DFlow trading integrations) align with the included reference docs (DFlow spot & prediction market docs, Helius DAS/Wallet/Sender/LaserStream) and the installer simply copies the SKILL.md and references. There are no unrelated environment variables, binaries, or config paths requested that would be out of scope for a Solana trading integration.
Instruction Scope
SKILL.md gives explicit, bounded instructions: check for Helius MCP tools, read the provided reference files, and use DFlow/Helius endpoints and MCP tooling. It requires contacting external APIs (DFlow endpoints, proof.dflow.net, Helius services) which is necessary for the documented functionality. The instructions do not ask the agent to read arbitrary local files, exfiltrate secrets, or modify unrelated skill/system configs.
Install Mechanism
There is no automated install spec; install.sh is a simple local copier that places skill files into a Claude skills directory and prints next steps. It does not download or execute remote code. The only external install the SKILL.md suggests (claude mcp add helius npx helius-mcp@latest) is a user-visible command that would run npx to fetch the MCP tool if the user chooses to run it — this is expected for integrating third-party tooling.
Credentials
The skill does not declare required environment variables. Reference docs and examples mention HELIUS_API_KEY and DFLOW_API_KEY, which are appropriate and proportional for calling Helius and DFlow services. No unrelated secrets (cloud provider keys, DB passwords, etc.) are requested.
Persistence & Privilege
Skill flags are conservative: always:false and user-invocable:true. The included install.sh only copies files into a user-specified location and does not attempt to change other skills or system-wide settings.
Assessment
This skill appears internally consistent and implements documentation-heavy references for building with DFlow and Helius. Before installing: (1) review the reference files yourself (they will be copied to your skills folder); (2) be prepared to supply HELIUS_API_KEY and/or DFLOW_API_KEY when you actually call those services — the skill doesn't require them to be installed; (3) the installer script only copies files locally, but the SKILL.md recommends installing MCP tools (running the suggested npx command will download code via npm — review that tool before running it); (4) never paste private keys into code or logs — follow the docs' secure-signing guidance for wallet operations; (5) if you plan to use prediction markets, be aware of KYC and geoblocking responsibilities described in the docs.Like a lobster shell, security has layers — review code before you run it.
DeFivk973npfe9mjdgratnj97krge4982pc9sheliusvk973npfe9mjdgratnj97krge4982pc9slatestvk973npfe9mjdgratnj97krge4982pc9smcpvk973npfe9mjdgratnj97krge4982pc9ssolanavk973npfe9mjdgratnj97krge4982pc9stradingvk973npfe9mjdgratnj97krge4982pc9s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.