Ai Intelligent Blockchain Platform

区块链平台，智能合约 + DApp 开发。

Security Scan

The skill's description matches a blockchain dev platform, but the runtime instructions tell the user/agent to clone and run code from a GitHub repo without declaring needed credentials or verifying the code — this mismatch and the unreviewed external execution are concerning.

Purpose & Capability

Name/description (智能合约、DApp、钱包管理、交易监控) matches a blockchain platform. However, the skill declares no required env vars or binaries despite functionality (wallets, node/API keys, multi-chain access) that normally require credentials/endpoints. This is an incomplete declaration rather than impossible, but worth noting.

Instruction Scope

SKILL.md instructs cloning https://github.com/openclaw-skills/ai-intelligent-blockchain-platform and running pip install -r requirements.txt and python app.py. Those instructions cause execution of remote code and may access local network/files or exfiltrate secrets; the instructions provide no verification, no description of what the app does, and do not declare what environment variables or keys are needed.

Install Mechanism

There is no formal install spec in the package; the README-style instructions rely on git clone from a GitHub repo and pip install. GitHub is a common host, but cloning and executing unreviewed code is a moderate risk because it can run arbitrary code on the machine.

Credentials

The skill requests no environment variables or credentials, yet its advertised features (wallet management, multi-chain support, transaction monitoring) typically require private keys, provider endpoints (INFURA/Alchemy), or API keys. The absence of declared secrets is a mismatch and could hide implicit credential requests performed by the fetched code.

Persistence & Privilege

The skill is instruction-only, has always:false, and does not request persistent privileges in the package metadata. It does instruct running an external app, but the skill itself does not claim elevated platform privileges.

What to consider before installing

This package is an instruction-only skill that tells you to clone and run code from a GitHub repository. Before installing or running it: (1) review the referenced repository (look at app.py and requirements.txt) to see what the code does and whether it asks for keys or makes network calls; (2) verify the repo source and authorship (ensure it's the official project you expect); (3) never run code that asks for private keys on an untrusted host — use sandboxed or isolated environments for testing; (4) expect the app to require node/provider API keys or wallet secrets — confirm how those are handled and stored; (5) if you need assurance, ask the publisher for signed releases or a vetted install mechanism. Given the unspecified credentials and the instruction to execute remote code, proceed with caution.

AI 智能区块链平台

描述

区块链平台，智能合约 + DApp 开发。

功能

• 智能合约开发（Solidity）
• DApp 开发（前端集成）
• 链上数据分析（数据监控）
• 钱包管理（多链支持）
• 交易监控（实时监控）

定价

• 基础版：¥399/月（1 合约）
• 专业版：¥1999/月（10 合约）
• 企业版：¥5999/月（无限合约）

适用场景

• 区块链开发
• DeFi 应用
• NFT 平台
• 供应链溯源

技术栈

• Python + FastAPI
• Web3.py
• 智能合约
• 链上数据

安装

git clone https://github.com/openclaw-skills/ai-intelligent-blockchain-platform
cd ai-intelligent-blockchain-platform
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team