Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MemeCoin分析师

v1.0.0

提供Meme币价格走势分析、技术指标解读、短期涨跌预测及持币地址筹码分布风险评估的专业工具。

0· 329·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for pxyyqm626529-afk/memecoin-analyst.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "MemeCoin分析师" (pxyyqm626529-afk/memecoin-analyst) from ClawHub.
Skill page: https://clawhub.ai/pxyyqm626529-afk/memecoin-analyst
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install pxyyqm626529-afk/memecoin-analyst

ClawHub CLI

Package manager switcher

npx clawhub@latest install memecoin-analyst
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the instructions (price, indicators, holders analysis). However the SKILL.md also includes a payment model and a hard-coded SkillPay API key even though the skill declares no required credentials or payment integration — that payment detail is not justified by the declared requirements or provenance.
!
Instruction Scope
Runtime instructions stay within the stated analysis scope (price and on-chain holder analysis) and reference DexScreener and chain explorers appropriately. But the doc directly exposes an API key (sk_...) and a third-party payment flow (SkillPay.me) in plaintext; that is outside the normal responsibilities of an instruction-only analysis skill and could lead to accidental credential reuse or misuse.
Install Mechanism
No install spec and no code files are present, so nothing will be written to disk or executed by installing the skill. This lowers risk from install-time code execution.
!
Credentials
The skill declares no required environment variables or credentials, yet the SKILL.md contains an explicit API key and instructs a deployment env var name (SKILLPAY_API_KEY). Hard-coded credentials in the documentation are disproportionate and unexplained and could be a leaked or malicious secret.
Persistence & Privilege
The skill does not request always:true and does not request elevated platform privileges. It is user-invocable and can be called autonomously (platform default), which is expected for skills.
What to consider before installing
Do not assume this skill is safe just because it has no install or files. Specific things to consider before installing or using it: - The SKILL.md includes a plaintext API key (sk_...). Treat that as untrusted: do not reuse it and avoid sending private data to endpoints that accept it. Ask the author to confirm the key's purpose and validity or to remove it. - The skill declares no source/homepage and the owner is unknown; prefer skills with clear authorship and repository links. - The skill mentions charging 0.001 USDT via SkillPay.me but provides no mechanism the agent will use to bill you; ask how payments are enforced and whether you will be prompted before any charge. - If you plan to self-host, the README suggests using SKILLPAY_API_KEY as an env var — ensure you supply your own key (never the embedded one) and rotate any real keys you test with. - Because the skill touches blockchain data/APIs, verify which external APIs (DexScreener, explorers) will be called and whether API keys or rate limits are needed. Confirm privacy expectations (what data is sent to third parties). - If you want higher assurance, request the skill's source code or a repository, or run it in an isolated environment. If the author cannot provide provenance for the embedded API key or the service, treat the skill as untrusted. Given these unexplained inconsistencies (embedded secret, payment instructions, unknown origin), proceed with caution or mark the skill as untrusted until provenance and credential handling are clarified.

Like a lobster shell, security has layers — review code before you run it.

latestvk978a3x6ybhjve7xez4b79txtx82g7mz
329downloads
0stars
1versions
Updated 2h ago
v1.0.0
MIT-0

MemeCoin 分析师 Skill

简介

MemeCoin 分析师 - 专业的Meme币走势预测和筹码分布分析工具。

功能

  1. 价格走势分析 - 分析代币价格趋势、技术指标(RSI、MACD)
  2. 涨跌预测 - 基于技术面分析给出短期走势判断
  3. 筹码分布分析 - 分析持币地址分布,评估控盘风险
  4. 完整分析报告 - 综合价格和筹码数据的全面分析

定价

  • 费用: 0.001 USDT / 每次调用
  • 支付方式: SkillPay.me
  • API Key: sk_e0c26b0e9826d17c309bd5030cbe95ef04ed33cf4f05c03dae0f23358ee5e956

使用方法

1. 价格分析

分析 [代币地址] 的价格走势

例如:分析 EpX5r1u6K4g2W5Y8p3qR7vT1nH6jK9LmP0xS2wQ8aB4 的价格走势

支持的链:

  • solana
  • base
  • ethereum
  • arbitrum
  • bsc

2. 筹码分布分析

分析 [代币地址] 的筹码分布

3. 完整分析

给我 [代币地址] 的完整分析报告

API 接口

如果你需要自行托管服务,可以使用以下API:

价格分析

POST /analyze/price { "tokenAddress": "代币合约地址", "chain": "solana|base|ethereum|arbitrum|bsc" }

筹码分析

POST /analyze/holders { "tokenAddress": "代币合约地址", "chain": "solana|base|ethereum|arbitrum|bsc" }

完整分析

POST /analyze/full { "tokenAddress": "代币合约地址", "chain": "solana|base|ethereum|arbitrum|bsc" }

响应示例

{ "success": true, "token": { "address": "EpX5r1u6K4g2W5Y8p3qR7vT1nH6jK9LmP0xS2wQ8aB4", "symbol": "PEPE", "chain": "solana" }, "price": { "current": 0.00000123, "change24h": 15.5, "volume24h": 5000000 }, "indicators": { "rsi": 65, "macd_signal": "bullish", "trend": "bullish" }, "prediction": { "short_term": "看涨", "confidence": 65, "reasoning": "MACD显示金叉信号,短期趋势向上" }, "risk_assessment": { "level": "中", "summary": "筹码相对分散,需关注大户动向" } }

数据来源

  • 价格数据:DexScreener API
  • 链上数据:各链Explorer API

风险提示

重要声明

  • 此分析仅供参考,不构成投资建议
  • 加密货币波动剧烈,投资需自行承担风险
  • Meme币风险极高,请勿投入超过承受能力的资金
  • 任何投资决策前请进行充分研究

技术栈

  • 后端:Node.js + Express
  • 数据源:DexScreener API
  • 支付:SkillPay.me

部署

可以使用 Docker 部署:

docker build -t memecoin-analyst . docker run -d -p 3000:3000 -e SKILLPAY_API_KEY=your_api_key memecoin-analyst

版本

  • v1.0.0 - 初始版本

Comments

Loading comments...