by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's files and runtime instructions implement a local, mock/demo whale-tracking tool (no network calls or credentials), but the README/SKILL.md claim live data sources (Etherscan/Arkham/Nansen) and monetization which the code does not actually use—this mismatch could mislead users expecting live on‑chain integration.
评估建议
This package is self-contained demo code that prints simulated whale-tracking data and stores alert entries in a local data/whale-alerts.json file. If you expect live on-chain monitoring, ask the author how real-time data is fetched and what API keys or paid services are required (and why those credentials aren't declared). Inspect or sandbox the skill before giving it network access or integrating it into an agent that can invoke it autonomously. Note: the skill includes crypto donation address...详细分析 ▾
ℹ 用途与能力
Name/description (monitor large wallet activity) match the included scripts' intent, but the code uses entirely simulated/local data. The README advertises external data sources (Etherscan, Arkham, Nansen) and paid features, yet the code contains no API calls or required credentials—a functional mismatch that should be clarified.
✓ 指令范围
SKILL.md instructs the agent to run the local scripts and describes CLI commands. The scripts only read/write a local data file (data/whale-alerts.json) and print simulated reports; they do not access other system paths, unexpected env vars, or remote endpoints.
✓ 安装机制
No install spec is provided (instruction-only), and package.json exists but lists no external dependencies. Nothing in the manifest pulls remote code at install time; risk from install mechanism is low.
ℹ 凭证需求
The skill declares no required environment variables or credentials (appropriate for the provided mock implementation). However, the README references external paid data providers that would normally require API keys—those are not declared or used, producing an expectation gap.
✓ 持久化与权限
always is false and the skill does not request elevated privileges. The only persistent behavior is creating/maintaining a local 'data/whale-alerts.json' file for alerts, which is within the skill's stated scope and not system-wide.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/6
🐋 初始版本 - 巨鲸追踪 + 持仓分析 + 聪明钱排行
● 无害
安装命令 点击复制
官方npx clawhub@latest install whale-shark
镜像加速npx clawhub@latest install whale-shark --registry https://cn.clawhub-mirror.com
技能文档
🐋 巨鲸追踪 - 监控大户钱包动向，跟随聪明钱
基本信息
{
"name": "whale-shark",
"version": "0.1.0",
"description": "巨鲸追踪 - 监控大户钱包动向，跟随聪明钱",
"author": "@gztanht",
"license": "MIT"
}
命令系统
| 命令 | 描述 | 参数 |
|---|---|---|
whale | 查看巨鲸列表 | --limit, --type |
holdings | 持仓分析 | |
transfers | 大额转账 | --min |
smart | 聪明钱排行 | --limit |
alert | 提醒管理 | add, list, remove |
功能说明
1. 巨鲸列表 (whale.mjs)
显示追踪的巨鲸钱包：
- 钱包地址
- 标签分类
- 总资产
- 24h 变化
- 交易胜率
2. 持仓分析 (holdings.mjs)
详细分析巨鲸持仓：
- 持仓分布
- 24h 操作记录
- 聪明钱指标
3. 大额转账 (transfers.mjs)
监控链上大额转账：
- 转账方向
- 金额和代币
- 发送/接收方
4. 聪明钱排行 (smart.mjs)
按胜率排序的钱包列表
5. 提醒管理 (提醒.mjs)
设置转账提醒
巨鲸分类
| 类型 | 描述 | 权重 |
|---|---|---|
| smart_money | 高胜率交易者 | 5 |
| vc_fund | 风投基金 | 4 |
| market_maker | 做市商 | 3 |
| defi_protocol | 协议金库 | 2 |
| unknown | 未知 | 3 |
输出格式
巨鲸列表
🐋 WhaleWatch - 巨鲸钱包监控排名 钱包地址 标签 总资产 24h 变化 胜率
─────────────────────────────────────────────────────────────────────────
1 0x47ac...5Df3 Unknown Whale $125.8M +2.3% 68%
持仓分析
📊 WhaleWatch - 巨鲸持仓分析钱包：0x8f3B...2Ae1
持仓分布:
ETH $45.2M 51% 🟢 +12%
定价策略
- 免费版: 5 次查询/天
- 赞助版: 0.5 USDT/USDC → 无限查询
未来规划
- v0.2.0 - 实时推送通知
- v0.3.0 - 自动跟随交易
- v1.0.0 - AI 预测巨鲸操作
🐋 WhaleWatch v0.1.0 - 关注 Whales
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制