Todays Orders
v1.0.0Use this skill when the user wants a single approved onchain order for a Solana wallet, one explicit forbidden order, a quote-backed execution preview, or a...
⭐ 0· 75·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description and instructions consistently target producing one approved onchain order for a Solana wallet using OKX OnchainOS (wallet, market, trade, broadcast). That is coherent. However, the skill references an external service (OKX OnchainOS) as its factual layer but does not declare any required credentials or environment variables or explain how the agent will access that service; this is a functional gap (not necessarily malicious) that may lead to hallucinated quotes/routes if connectivity is absent.
Instruction Scope
SKILL.md is explicit and scoped: extract a Solana address, fetch wallet posture, fetch market context for relevant holdings, produce one approved order and one forbidden order, produce quote/route previews, and only broadcast after explicit approval. The instructions do not ask the agent to read unrelated files, secrets, or system paths.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal footprint. Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requests no environment variables or credentials in metadata, yet runtime instructions require access to OKX OnchainOS (wallet, market, trade, broadcast). Either the platform provides that integration implicitly, or the skill should have declared required credentials. The absence of declared credentials is a proportionality/clarity issue: ensure the execution environment supplies the necessary API access, and be cautious about possible hallucinated data if it does not.
Persistence & Privilege
No special persistence privileges requested. always is false. The agents/openai.yaml includes allow_implicit_invocation: true which permits implicit invocation; this is expected for a user-invocable skill and is not by itself a security concern.
Assessment
This skill is internally consistent as an instruction-only workflow, but before installing or using it you should: 1) Confirm your OpenClaw/runtime environment provides an OKX OnchainOS connector or the necessary API keys — the skill does not declare credentials. 2) Understand that execution (broadcasting a transaction) should only happen after explicit user approval; test the preview path first. 3) If your runtime lacks the OKX connector, expect the agent might hallucinate quotes/routes; do not rely on previewed execution values until they come from a trusted API. 4) If you plan to allow broadcasting, restrict the skill’s access to only the wallet(s) you control and require manual confirmation for any signed transaction.Like a lobster shell, security has layers — review code before you run it.
latestvk97fxy1mznetagp9wtqhb7b1rx83g4vc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.