wallet-pnl
v1.0.0Analyze any Solana wallet's trading history: win rate, realized PnL, trader type, and copy-trade rating. Use when the user wants to check if a wallet is wort...
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (python3), and primaryEnv (HELIUS_API_KEY) align with the implementation: scripts/pnl.py fetches transactions and RPC data from Helius/Solana to compute PnL and win rates. Minor metadata inconsistency: registry 'Homepage: none' at top vs. clawhub.json/README pointing to a GitHub repo.
Instruction Scope
SKILL.md instructs running the bundled Python code or using the provided HTTP endpoint. The instructions and code only request transaction data (Helius API and Solana RPC) and do not read unrelated local files or environment variables. The API server optionally integrates a payment facilitator for a paid endpoint, which results in outbound requests to the configured FACILITATOR_URL.
Install Mechanism
No automated install script in the registry; the skill is instruction-first and includes source files. Self-hosting instructions use pip with a small set of common Python dependencies (fastapi, uvicorn, requests, aiofiles). No high-risk remote download or obscure install URLs are present.
Credentials
Only HELIUS_API_KEY is declared as required (primaryEnv). That is appropriate for fetching parsed transaction history and Solana RPC access. Optional env vars in the server (PAY_TO, FACILITATOR_URL, PRICE_PER_REQUEST) relate to the documented paid API and are justified by that functionality.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges. Hosting the included server is optional and confined to its own process; the skill does not modify other skills or agent configuration.
Assessment
This skill appears to do what it claims: it needs a Helius API key to fetch Solana swap data and will compute PnL locally or via the included API server. Before installing or running: 1) Provide only a Helius API key (no other secrets required). 2) If you use the hosted/paid API, note the $0.03/request facilitator flow — the server will call an external FACILITATOR_URL and may require configuring PAY_TO. 3) If self-hosting, run pip install in an isolated environment (venv/container) and review the PAY_TO/FACILITATOR_URL env vars to avoid unexpected payments. 4) The registry metadata has a minor inconsistency around homepage/source; consider verifying the upstream GitHub repo and reviewing the code yourself if you need stronger assurance.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
Binspython3
Primary envHELIUS_API_KEY
Environment variables
HELIUS_API_KEYrequiredcopy-tradecryptodefilatestpnlsmart-moneysolanatradingwallet-analysiswin-rate
Solana Wallet PnL Analyzer
Analyze any Solana wallet's swap history to determine if it's worth copy-trading. Returns win rate, realized PnL in SOL, trader classification, and top traded tokens.
Paid API
$0.03 USDC per request via x402 on Base chain:
npx awal@latest x402 pay "https://wallet-pnl-production.up.railway.app/pnl?wallet=WALLET_ADDRESS"
API Response
{
"wallet": "AbCd...XyZw",
"summary": {
"trader_type": "TRADER",
"copy_rating": "FOLLOW",
"total_trades": 87,
"win_rate_pct": 64.3,
"win_trades": 36,
"loss_trades": 20,
"realized_pnl_sol": 12.45,
"avg_trade_size_sol": 0.85
},
"most_traded_tokens": [...],
"recent_trades": [...]
}
Copy Rating Guide
| Rating | Meaning |
|---|---|
| ✅ FOLLOW | Win rate ≥ 60% and positive PnL — worth copying |
| ⚠️ NEUTRAL | Mixed results — monitor before copying |
| 🚨 AVOID | Low win rate or negative PnL — do not copy |
Trader Types
| Type | Meaning |
|---|---|
| WHALE | Avg trade > 10 SOL |
| DEGEN | 50+ trades, high frequency |
| TRADER | Balanced buy/sell activity |
| HOLDER | Mostly buying, holding |
| INACTIVE | Fewer than 5 trades found |
Self-Hosted
pip install -r {baseDir}/api/requirements.txt
python3 {baseDir}/scripts/pnl.py <WALLET_ADDRESS>
Requires HELIUS_API_KEY for transaction history (free at helius.xyz).
Comments
Loading comments...
