INCLAWNCH UBI Staking
v1.0.3Stake and unstake INCLAWNCH tokens in the on-chain UBI staking contract on Base. Query treasury stats, wallet positions, APY estimates, and top stakers. All...
⭐ 0· 431·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (INCLAWNCH staking on Base) matches the content of SKILL.md: it uses curl for public reads and describes on-chain transactions with contract addresses and function selectors. Requiring only curl and providing read endpoints is proportionate to the stated purpose.
Instruction Scope
SKILL.md stays within staking-related actions: it documents contract addresses, selectors, view functions, and a public API for treasury/wallet queries. Two caveats: (1) read examples send wallet addresses to an external API (inclawbate.com), which may reveal or log wallet->identity mappings (privacy risk); (2) write operations are described as signed on-chain transactions but the skill does not describe how signing/broadcasting is performed (it expects an external wallet/integration). Both are expected for a staking skill but are worth confirming before use.
Install Mechanism
No install specification and no bundled code — instruction-only skill. This is low-risk: nothing is downloaded or written to disk by the skill itself.
Credentials
The skill declares no environment variables or credentials, which is appropriate. However, write operations implicitly require a wallet signing capability (private key, injected signer, or external wallet). The SKILL.md does not request private keys (good), but you must ensure signing is handled securely by your agent or wallet integration — do NOT paste private keys or seed phrases into the agent.
Persistence & Privilege
The skill does not request always:true and has no install hooks or config paths. It does not request elevated persistence or modify other skills' configs; autonomous invocation is allowed by default (normal).
Assessment
Before installing or invoking write operations: (1) Verify the contract addresses and selectors on a trusted block explorer (Base/Etherscan equivalent) to ensure they match the real Inclawnch staking contract. (2) Inspect or verify the inclawbate.com API and its privacy policy — read requests that include wallet addresses may expose associations (addresses ↔ social handles). (3) Never provide private keys/seed phrases to the agent; ensure signing is done by a trusted wallet integration (hardware wallet, injected signer, or verified wallet provider). (4) Try read-only queries first (curl to the API) to confirm expected responses. (5) If you plan to use write features, request the skill's source or audit logs from the publisher or use a small, low-value transaction first. The skill appears coherent for staking tasks, but exercise standard on-chain safety and privacy checks before transacting.Like a lobster shell, security has layers — review code before you run it.
latestvk977ee6xdbt8enc64b2mhc23js81emwf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌱 Clawdis
Binscurl