NFT Valuator
v1.0.0NFT估值与 rarity 分析。支持OpenSea、Blur数据。触发词:NFT估值、NFT价格、rarity查询、NFT分析。
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The name/description promise OpenSea and Blur data plus rarity, historical trades, and holdings P&L. The included code only calls OpenSea's collection stats endpoint and returns basic collection metrics (floor, avg, 24h volume, owners, supply). There is no Blur integration, no rarity ranking logic, no historical-trades retrieval, and no holdings/P&L computation. The SKILL.md and printed output also claim a per-call charge but there is no billing integration — only a hardcoded message.
Instruction Scope
SKILL.md is short and doesn't instruct the agent to read local files or other credentials. The runtime code only performs an outbound HTTPS GET to api.opensea.io and formats results. There is no evidence of exfiltration or broader system access, but the instructions and examples overstate capabilities compared with the code.
Install Mechanism
No install spec and no external downloads. The skill is instruction + a small Python script that uses the requests library. Nothing will be written to disk by an installer step beyond the included files.
Credentials
The skill requires no environment variables, no credentials, and no config paths. Its single external access is an HTTP request to OpenSea, which is expected for an NFT data tool. No unrelated credentials are requested.
Persistence & Privilege
always is false and the skill does not request persistent/system-wide configuration or modify other skills. It does not request elevated privileges.
What to consider before installing
This skill is not obviously malicious (it only calls OpenSea), but it is inconsistent and misleading: it advertises Blur support, rarity analysis, historical trades, and P&L calculation that are not present in the bundled script. It also claims a per-call fee but contains no billing or payment mechanism — it only prints "已扣费 0.001 USDT". Before installing or using it: 1) ask the author to clarify/implement Blur integration and the advanced features or remove those claims; 2) request proof of how billing will be enforced if you expect real charges; 3) review or run the script in a sandbox to confirm its behavior and any network endpoints it contacts; and 4) if you need the missing features, prefer a skill or tool that explicitly requires and documents the necessary API keys (e.g., Blur API) rather than trusting this one.Like a lobster shell, security has layers — review code before you run it.
latest
NFT估值器
每次调用收费 0.001 USDT。
功能
- 地板价查询
- Rarity排名分析
- 历史成交记录
- 持仓盈亏计算
输出示例
🎨 Bored Ape #1234 ━━━━━━━━━━━━━━━━ 💰 估值: 68.5 ETH 📊 Rarity: Top 5% 📈 7日涨跌: +12% 🔗 OpenSea | Blur
Comments
Loading comments...
