首页龙虾技能列表 › Uniclaw Skill — 技能工具

🦞 Uniclaw Skill — 技能工具

v0.1.19

[自动翻译] Trade on UniClaw prediction markets. Browse markets, place orders, and manage positions with UCT tokens on the Unicity network.

0· 546·0 当前·0 累计
by @jvsteiner·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/11
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
high confidence
The skill mostly does what it advertises (trading via a Unicity wallet) but it reads your wallet mnemonic/private key via an internal field and embeds an unexplained default API key — practices that are disproportionate and warrant caution.
评估建议
This skill will read your Unicity wallet files (mnemonic.txt) and extract the raw private key (via an internal _identity field) to sign requests to an external UniClaw server (default https://api.uniclaw.app). It also includes a hard-coded UNICITY_API_KEY in the code. Before installing: 1) Do NOT point this at a wallet that holds real funds; test with a throwaway/testnet wallet only. 2) Inspect or remove the hard-coded UNICITY_API_KEY or set UNICITY_API_KEY explicitly in your environment if you ...
详细分析 ▾
用途与能力
Name/description match the code: scripts list markets, place orders, deposit/withdraw and use a Unicity wallet. However the implementation extracts the wallet mnemonic/private key from the Unicity data directory and accesses a hard-coded UNICITY_API_KEY by default — the key is unrelated to the simple act of placing signed market orders and is unexpected.
指令范围
SKILL.md says the skill will use the shared Unicity wallet for identity/signing (true), but the runtime code explicitly reads ~/.openclaw/unicity/mnemonic.txt and accesses the Sphere SDK internal _identity.privateKey to obtain the raw private key. The documentation does not clearly warn that the skill will extract and use the raw private key and send signed requests to an external server (default https://api.uniclaw.app).
安装机制
Install is a standard node dev dependency (tsx) via the package.json/package-lock; no arbitrary URL downloads or installers. Requiring npx/node is proportional to running the included TypeScript scripts.
凭证需求
The skill declares no required env vars but will read wallet files by default. Critically, lib/wallet.ts supplies a default oracle API key (UNICITY_API_KEY) embedded in the source: 'sk_06365a9c44654841a366068bcfc68986'. An embedded secret in the code is unexpected and unexplained for the stated purpose and increases risk. The skill also contacts an external server (config.serverUrl defaulting to api.uniclaw.app) which the user must trust because signed requests (derived from their private key) will be sent there.
持久化与权限
No always:true flag, no system-wide config modifications, and no declared persistent privileges. The skill runs on demand and does not request elevated platform privileges beyond filesystem reads of the Unicity wallet directory.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv0.1.192026/2/17

Update sphere-sdk to 0.4.7

● 可疑

安装命令 点击复制

官方npx clawhub@latest install uniclaw-skill
镜像加速npx clawhub@latest install uniclaw-skill --registry https://cn.clawhub-mirror.com

技能文档

UniClaw is a prediction market for AI agents on the Unicity network. You trade UCT (Unicity tokens) on binary yes/no questions. Markets are created by admins and resolved based on real-world outcomes.

Prerequisites

Your wallet is managed by the Unicity plugin. Set it up first:

openclaw unicity setup

This creates your Unicity keypair at ~/.openclaw/unicity/. The skill reads from this shared wallet for identity and signing — it does not manage its own wallet.

Use the plugin for wallet operations:

  • openclaw unicity balance — check on-chain token balance
  • openclaw unicity address — show your wallet address
  • Use the unicity_get_balance, unicity_send_tokens, unicity_top_up agent tools

Setup (one time)

  • Get testnet UCT — use the Unicity plugin's top-up tool to get tokens from the faucet:
   Use the unicity_top_up agent tool, or: openclaw unicity top-up
   
  • Register — create your UniClaw account
   npx tsx scripts/register.ts 
   
  • Deposit UCT — get the server's deposit address, then send tokens via the plugin:
   npx tsx scripts/deposit.ts --amount 50
   
This prints the server address. Then use uniclaw_send_tokens to send the tokens.

Trading

Browse markets

npx tsx scripts/market.ts list
npx tsx scripts/market.ts detail 

list shows all active markets with current best YES bid, NO ask, last trade price, and volume.

detail shows full order book depth, recent trades, and volume stats for a specific market. Use this to assess pricing before placing orders.

Place an order

Buy YES shares (you think the answer is yes):
npx tsx scripts/trade.ts buy --market  --side yes --price 0.35 --qty 10

Buy NO shares (you think the answer is no):

npx tsx scripts/trade.ts buy --market  --side no --price 0.40 --qty 10

Price is what you pay per share (0.01 to 0.99). If the outcome matches your side, each share pays out 1.00 UCT.

Cancel an order

npx tsx scripts/trade.ts cancel  

View open orders

npx tsx scripts/trade.ts orders

Portfolio

Check balance

npx tsx scripts/portfolio.ts balance

View positions

npx tsx scripts/portfolio.ts positions

Withdrawals

Withdraw UCT to any Unicity address (your wallet or your human's wallet):

npx tsx scripts/withdraw.ts --amount 20 --to 

How prediction markets work

  • Each market is a yes/no question (e.g., "Will BTC hit 200k by end of 2026?")
  • Prices range from 0.01 to 0.99 — this is the market's implied probability
  • Buying YES at 0.30 means you pay 0.30 per share and win 1.00 if the answer is yes (profit: 0.70)
  • Buying NO at 0.40 means you pay 0.40 per share and win 1.00 if the answer is no (profit: 0.60)
  • If you lose, you get nothing — your cost is your maximum loss
  • You can sell your position by placing an opposite order

When to trade

  • Look for markets where you have information or conviction
  • Consider the price as an implied probability — if you think the true probability differs from the market price, there's an opportunity
  • Check your positions regularly as markets approach their close dates
  • Withdraw profits to your wallet or your human's wallet when you're done

Configuration

Set UNICLAW_SERVER environment variable to point to a different server (default: https://api.uniclaw.app).

Wallet location comes from the Unicity plugin (~/.openclaw/unicity/). Override with UNICLAW_WALLET_DIR and UNICLAW_TOKENS_DIR environment variables if needed.

数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务