Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Token Unlock Pro

v1.0.1

专业的代币解锁预警系统 - 支持72h/48h/24h/6h/实时多维度预警,类型分类(种子轮/公募/生态/质押),解锁额度分级,用户自定义监控,解锁日历月/周/日视图,历史数据分析及走势预测。每次调用需支付0.001 USDT。

0· 342·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mrchillhigh/token-unlock-pro.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Token Unlock Pro" (mrchillhigh/token-unlock-pro) from ClawHub.
Skill page: https://clawhub.ai/mrchillhigh/token-unlock-pro
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: SKILLPAY_API_KEY, SKILL_ID
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install mrchillhigh/token-unlock-pro

ClawHub CLI

Package manager switcher

npx clawhub@latest install token-unlock-pro
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (代币解锁预警) matches the code and declared requirements: a Python backend (FastAPI), SQLite usage, and SkillPay billing. Required binary (python3) and required envs (SKILLPAY_API_KEY, SKILL_ID) are consistent with the described payment-integrated API service.
Instruction Scope
SKILL.md instructions and API surface (alerts, calendar, watchlist, portfolio import, billing) stay within the token-unlock monitoring domain. The runtime instructions do not ask agents to read unrelated host files or arbitrary environment variables beyond those declared.
Install Mechanism
No install spec is provided (instruction-only install), so nothing is automatically downloaded or executed outside included code files. A Python service is provided in api/main.py and requirements.txt; installing/running it requires standard Python dependencies only.
!
Credentials
Only SKILLPAY_API_KEY and SKILL_ID are declared, which is proportional to a pay-per-call service—however the code and README include a hard-coded default SkillPay API key and a default SKILL_ID. Additionally Config.DEBUG defaults to true (via os.getenv default), and the payment function short-circuits when DEBUG is true, effectively bypassing payment checks in default configurations. Hard-coded credentials and default debug bypasses are significant red flags for credential leakage and unintended usage.
Persistence & Privilege
The skill does not request always:true and does not appear to modify other skills or global agent configuration. It persists data locally via an SQLite DB file (DATABASE_URL default), which is normal for this kind of service.
What to consider before installing
This skill is generally coherent with its stated purpose (token-unlock alerts) but has implementation issues that warrant caution: - The code and README embed a default SKILLPAY API key and SKILL_ID; treat that as a leaked/placeholder secret. Do not assume it is safe to use. Ask the author to remove any hard-coded keys and never ship secrets in source files. - Config.DEBUG defaults to true and the payment routine bypasses charging in debug mode. If you need enforcement of payments, set DEBUG=false and verify charge_user works against SkillPay with your own key. - The service makes outbound calls to skillpay.me (billing) and likely to token data providers; run it in an isolated environment if you test it and inspect network activity. - If you plan to install/run the code: replace the embedded API key with your own, set DEBUG=false, rotate any keys if they were leaked, and review the entire api/main.py for any other hard-coded endpoints or unexpected behavior (the source appears to have a truncated function in the provided snapshot that should be fixed). If you cannot confirm the developer identity or cannot safely replace/remove the embedded secrets, avoid installing this skill in production or on machines with sensitive credentials.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔓 Clawdis
Binspython3
EnvSKILLPAY_API_KEY, SKILL_ID
Primary envSKILLPAY_API_KEY
latestvk978259fmew9qk034bhw5m09f582a05q
342downloads
0stars
2versions
Updated 11h ago
v1.0.1
MIT-0

Token Unlock Pro - 代币解锁预警系统

功能特性

1. 多时间维度预警

  • 72小时预警 - 提前3天预警即将解锁的代币
  • 48小时预警 - 提前2天预警
  • 24小时预警 - 提前1天预警
  • 6小时预警 - 提前6小时预警
  • 实时监控 - 实时监控解锁事件

2. 类型分类系统

  • 种子轮 (Seed) - 种子轮投资者解锁
  • 公募 (Public) - 公开募资解锁
  • 生态 (Ecosystem) - 生态系统发展解锁
  • 质押 (Staking) - 质押奖励解锁
  • 团队 (Team) - 团队份额解锁
  • 顾问 (Advisor) - 顾问奖励解锁
  • 社区 (Community) - 社区激励解锁

3. 解锁额度分级

  • 鲸鱼级 (Whale) - 解锁价值 > $10,000,000
  • 大型 (Large) - 解锁价值 $1,000,000 - $10,000,000
  • 中型 (Medium) - 解锁价值 $100,000 - $1,000,000
  • 小型 (Small) - 解锁价值 < $100,000

4. 用户自定义监控

  • 手动添加 - 输入代币名称或合约地址添加监控
  • 导入持仓 - 输入钱包地址自动导入持仓代币
  • 热门项目 - 一键订阅当前热门项目

5. 解锁日历

  • 月视图 - 查看本月所有解锁事件
  • 周视图 - 查看本周解锁事件
  • 日视图 - 查看今日解锁事件

6. 历史数据分析

  • 历史走势 - 分析历次解锁后的价格走势
  • 相关性分析 - 计算解锁与价格的相关性
  • 预测模型 - 基于历史数据的走势预测

使用方法

基础查询

查询72小时内即将解锁的代币
查询今天有哪些代币解锁
查询ARB代币的解锁日历

高级分析

分析ARBITRUM历史解锁对价格的影响
查看本周解锁额度最大的项目
订阅SOL代币的解锁监控

用户监控

添加BTC到我的监控列表
导入我的钱包持仓
显示热门订阅项目

API 端点

端点方法描述
/api/alertsGET获取预警列表
/api/calendarGET获取解锁日历
/api/projectsGET获取项目列表
/api/watchlistPOST添加到监控列表
/api/watchlistGET获取用户监控列表
/api/portfolio/importPOST导入钱包持仓
/api/trendingGET获取热门项目
/api/analysis/{token}GET获取历史分析
/api/billing/chargePOST支付计费

价格说明

  • 每次 API 调用:0.001 USDT
  • 支付通过 SkillPay 安全处理
  • 支持 USDT TRC20 网络支付

技术架构

  • 后端: Python FastAPI
  • 数据库: SQLite (本地存储)
  • 数据源: TokenUnlocks, CoinGecko
  • 支付: SkillPay.me API

更新日志

v1.0.0 (2026-03-05)

  • 初始版本发布
  • 多时间维度预警支持
  • 完整类型分类系统
  • 解锁额度分级
  • 用户自定义监控
  • 解锁日历视图
  • 历史数据分析
  • SkillPay 支付集成

Comments

Loading comments...