by 安全扫描
OpenClaw
安全
high confidenceThe skill's requested resources and runtime instructions match its stated purpose (querying Bifrost vETH data via public RPCs and the Bifrost REST API); it is an instruction-only, read-only integration with no surprising environment or install requirements.
评估建议
This skill appears coherent and read-only. Before installing, verify the contract address and RPC endpoints match official Bifrost documentation. Never provide private keys, wallet seed phrases, or local keystore files — the skill only needs public addresses for balance queries. If you choose to set environment variables (BIFROST_RPC_URL or BIFROST_VETH_ADDRESS), prefer using trusted public RPCs or your own node; avoid storing sensitive secrets in environment variables. If you want stronger assu...详细分析 ▾
✓ 用途与能力
Name/description promise (query on-chain vETH/ERC-4626 data and Bifrost REST API) aligns with the instructions: it lists contract addresses, RPC endpoints, function selectors, and the Bifrost API endpoint needed to answer APY/TVL/balance queries.
✓ 指令范围
SKILL.md focuses on read-only queries (RPC calls and GET https://api.bifrost.app/api/site). It asks the user whether to override defaults and to provide target addresses for balance queries. It does not instruct the agent to read local filesystem secrets, private keys, or unrelated system config.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is written to disk or fetched at install time, which minimizes risk.
ℹ 凭证需求
SKILL.md documents optional environment variables (BIFROST_CHAIN, BIFROST_RPC_URL, BIFROST_VETH_ADDRESS) to override defaults, but the registry metadata lists no required env vars. This is consistent (optional config only). There are no credentials or secrets requested.
✓ 持久化与权限
always:false and no install actions or config writes declared. The skill can be invoked autonomously (platform default) but it has only read-only network queries and no broad privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/13
- Initial release of bifrost-slpx-info skill. - Query Bifrost SLPx liquid staking protocol data (vETH) on Ethereum, Base, Optimism, and Arbitrum. - Provides exchange rates, APY/yield, TVL, protocol stats, user balances, and withdrawal queue status. - Supports both on-chain ERC-4626 vault calls and Bifrost REST API queries. - Easy configuration for custom chain, RPC, or contract address; sensible defaults provided. - Includes examples and quick reference for common queries (rates, balances, protocol metrics).
● 无害
安装命令 点击复制
官方npx clawhub@latest install bifrost-slpx-info
镜像加速npx clawhub@latest install bifrost-slpx-info --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制