首页 › 龙虾技能列表 › DeBox Community — 技能工具

DeBox Community — 技能工具

v1.0.0

Manage DeBox communities, DAOs, and NFT groups. Use when you need to verify group membership, check voting/lottery participation, query group info, or valida...

1· 170·0 当前·0 累计
by @zanyk4502 (ZanyK4502)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/12
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
high confidence
The skill appears to implement the advertised DeBox community queries, but there are multiple inconsistencies and an included API key in the package that the user should not trust without verification.
评估建议
This skill implements DeBox API calls and mostly does what its description says, but there are important red flags you should address before installing or using it: - Do not trust the API key bundled in config.json. Treat it as sensitive: either remove the file or replace the key with your own. If that key looks like a real credential, assume it may be active and consider asking the publisher to confirm or revoke it. - The registry metadata omitted required env vars; the CLI actually needs DEBO...
详细分析 ▾
⚠ 用途与能力
The skill's stated purpose (DeBox community queries) matches the code and docs. However the registry metadata declared no required environment variables while SKILL.md and the CLI require DEBOX_API_KEY (and optionally DEBOX_DEFAULT_GROUP). That mismatch is an incoherence and reduces trust.
ℹ 指令范围
SKILL.md and scripts only describe querying the DeBox API and local files (e.g., wallets.txt for batch-verify). This stays within the stated purpose. Two issues: (1) SKILL.md tells users to place a config.json under ~/.openclaw/workspace/debox-community, but the code reads ../config.json relative to the scripts folder (potential path mismatch). (2) The repository includes a config.json containing an apiKey value — embedding a key in the package contradicts the guidance to set your own API key and may leak a credential.
ℹ 安装机制
There is no remote install script in the skill bundle (instruction-only install), but package.json lists native image libraries (canvas, sharp). Installing those requires native build steps and pulls optional native binaries via npm; this is expected because the CLI can generate image reports, but it increases installation complexity and attack surface compared to a pure-JS tool.
⚠ 凭证需求
The skill legitimately needs a DeBox API key, but the registry metadata failed to declare it. More importantly, the package includes a config.json with an API key value (cleartext). Shipping a credential inside the skill is disproportionate and risky — if that key is valid it could be abused, rate-limited, or revoked; if it's someone else's key it may indicate sloppy handling or deliberate leaking.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated system privileges or modify other skills. It runs as a normal CLI skill and reads local files the user supplies (wallet lists, config).
安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/16

Initial public release

● 可疑

安装命令 点击复制

官方npx clawhub@latest install debox-community-zanyk
镜像加速npx clawhub@latest install debox-community-zanyk --registry https://cn.clawhub-mirror.com

技能文档

Manage DeBox communities, verify membership, and analyze community engagement.

Quick Start

Configuration

Set the DEBOX_API_KEY environment variable:

export DEBOX_API_KEY="your-api-key"

Or add to ~/.openclaw/workspace/debox-community/config.json:

{
  "apiKey": "your-api-key",
  "defaultGroupId": "optional-default-group-id"
}

Get your API Key from https://developer.debox.pro

Commands

Personal Data Report (推荐)

查看你的 DeBox 个人数据报告：

node scripts/debox-community.js profile --user-id "abc123"

Returns: 昵称、用户ID、钱包地址、等级、点赞数据

如何获取 user_id：

  • 打开 DeBox App
  • 进入个人主页
  • 点击分享，复制链接
  • 链接中的 id 参数就是 user_id

Group Info

Query group information:

node scripts/debox-community.js info --url "https://m.debox.pro/group?id=fxi3hqo5"

Returns: group name, member count, description, creator.

Member Verification

Check if a user is in a group:

node scripts/debox-community.js check-member --wallet "0x2267..." --group-url "https://m.debox.pro/group?id=fxi3hqo5"

Returns: boolean membership status.

User Profile

Get user profile information (nickname, avatar, wallet address):

node scripts/debox-community.js user-info --user-id "abc123"

Returns: user_id, nickname, avatar, wallet address.

Note: This API only supports user_id, not wallet address.

Vote Stats

Query user's voting activity in a group:

node scripts/debox-community.js vote-stats --wallet "0x2267..." --group-id "fxi3hqo5"

Returns: vote count, recent votes.

Lottery Stats

Query user's lottery participation:

node scripts/debox-community.js lottery-stats --wallet "0x2267..." --group-id "fxi3hqo5"

Returns: lottery count, win history.

Praise Info

Get user's praise/like data:

node scripts/debox-community.js praise-info --wallet "0x2267..." --chain-id 1

Returns: total likes received, recent praise.

Comprehensive Verification

Verify user eligibility with multiple criteria:

node scripts/debox-community.js verify --wallet "0x2267..." --group-url "..." --min-votes 5 --min-lotteries 1

Returns: pass/fail status with detailed breakdown.

API Reference

See references/api.md for complete API documentation.

Use Cases

DAO Membership Verification

Verify if a user is a DAO member with voting history:

node scripts/debox-community.js verify --wallet "0xabc..." --group-url "https://m.debox.pro/group?id=dao123" --min-votes 1

NFT Community Access

Verify NFT holder is in community group:

node scripts/debox-community.js check-member --wallet "0xabc..." --group-url "https://m.debox.pro/group?id=nft456"

Whitelist Generation

Batch verify multiple wallets:

node scripts/debox-community.js batch-verify --file wallets.txt --group-url "..." --min-votes 3

Error Handling

ErrorCauseSolution
INVALID_API_KEYAPI key missing or invalidCheck configuration
GROUP_NOT_FOUNDGroup ID/URL invalidVerify group URL format
USER_NOT_FOUNDWallet address not registeredConfirm user has DeBox account
RATE_LIMITToo many requestsWait and retry

Environment Variables

VariableRequiredDescription
DEBOX_API_KEYYesYour DeBox API key
DEBOX_DEFAULT_GROUPNoDefault group ID for commands
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务