ClawHub

StableOps Treasury

v0.1.0

Use this skill when a team, DAO, or builder wants to deploy USDC from a stablecoin treasury into LI.FI Earn vaults under explicit treasury policy limits, pre...

⭐ 0· 56·0 current·0 all-time
by@richard7463
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoRequires wallet
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (deploying treasury USDC into LI.FI Earn vaults with Composer) matches the runtime instructions: extracting a treasury policy, building a plan, querying a local plan/quote API, preparing a Composer quote, and producing a report. No unrelated credentials, binaries, or installs are requested.
ℹ
Instruction Scope
Instructions are narrowly focused on treasury policy, vault discovery, Composer quotes, execution, and reporting. They tell the agent to POST to a local service at http://localhost:3017 and to instruct the user/operator to connect and approve a treasury wallet for transaction signing. This assumes a local StableOps backend and an external signing flow; the skill does not instruct the agent to access files, secrets, or external endpoints beyond localhost.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk or fetched at install time. Lowest-risk install behavior.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The actions described (wallet connection and on-chain transaction submission) are consistent with the stated purpose and do not require the skill to request unrelated secrets.
✓
Persistence & Privilege
always is false and there is no install-time persistence. The included agents/openai.yaml sets allow_implicit_invocation: true which permits autonomous invocation by the platform; this is a normal setting for skills and not by itself disproportionate. The skill does not request modifications to other skills or system-wide settings.
Assessment
This skill is instruction-only and coherent with its described purpose, but it requires a local StableOps service listening on http://localhost:3017 and a connected treasury wallet to actually perform actions. Before installing or invoking: (1) confirm you run and trust the local StableOps backend referenced by the curl examples (the skill will POST to localhost); (2) never provide private keys or paste secret material into the agent—use an external wallet signer or hardware wallet for transaction signing; (3) review prepared Composer quotes and on-chain transactions before approving or broadcasting; (4) be aware the skill can be invoked automatically by the agent (allow_implicit_invocation), so decide whether to restrict autonomous execution in your agent settings if you want manual oversight.

Like a lobster shell, security has layers — review code before you run it.

composervk9752ssgtza3n0pc34ve0ex45s84qpg2earnvk9752ssgtza3n0pc34ve0ex45s84qpg2latestvk9752ssgtza3n0pc34ve0ex45s84qpg2lifivk9752ssgtza3n0pc34ve0ex45s84qpg2treasuryvk9752ssgtza3n0pc34ve0ex45s84qpg2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments