首页 › 龙虾技能列表 › aaveclaw — 技能工具

aaveclaw — 技能工具

v1.0.0

[自动翻译] Aave V3 lending protocol on Base Sepolia testnet. Deposit WETH collateral, borrow USDC, repay loans, withdraw collateral, check health factor, and min...

4· 1,770·5 当前·6 累计
by @chainyoda (Ajit Tripathi)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/10
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's code largely matches its Aave/testnet purpose, but the package metadata and registry entry omit that it requires a private key/config file and will run npm install + node scripts — this mismatch and the unknown source warrant caution.
评估建议
This skill's code appears to do what it says (interact with Aave on Base Sepolia), but there are a few things to consider before installing: - The registry metadata omitted that you must supply a private key. The code will look for X402_PRIVATE_KEY or a file (~/.x402-config.json or ./x402-config.json). Do not put a mainnet/private production key there—use an ephemeral/testnet key with minimal funds. - setup.sh runs npm install and then the node scripts execute. That will pull third-party packag...
详细分析 ▾
ℹ 用途与能力
The skill's code and SKILL.md implement Aave V3 actions on Base Sepolia (deposit, borrow, repay, withdraw, health, faucet) which is coherent with the stated purpose. However the registry metadata declares no required env variables or config paths, while the implementation requires a private key (X402_PRIVATE_KEY or ~/.x402-config.json). That mismatch is unexpected and should have been declared.
✓ 指令范围
Runtime instructions (SKILL.md) and the scripts limit actions to interacting with the Sepolia Base RPC and Aave contract addresses, reading a private key from an env var or the x402-config.json file, and printing account/tx info. The instructions do not attempt to read unrelated system files or contact unexpected external endpoints.
ℹ 安装机制
There is no platform install spec, but setup.sh runs npm install (registry.npmjs.org) to install ethers and its deps. Using npm is expected for a JS blockchain tool, but it still pulls third-party packages (ethers and deps) onto disk — audit or run in a restricted environment if you don't trust the source.
⚠ 凭证需求
The runtime requires access to a private key (via X402_PRIVATE_KEY env var or ~/.x402-config.json) to sign transactions — this is necessary for on-chain actions, but the registry did not declare any required credentials or config paths. Requiring a high-sensitivity secret without declaring it is a proportionality/visibility issue and increases risk if users are unaware.
✓ 持久化与权限
The skill does not request permanent 'always' inclusion, does not modify other skills, and only persists by installing npm packages in its own directory. Autonomous invocation is allowed (platform default) but not itself unusual here.
安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/2/4

Initial release: Aave V3 lending on Base Sepolia — deposit, borrow, repay, withdraw, health check, and faucet

● 可疑

安装命令 点击复制

官方npx clawhub@latest install aaveclaw
镜像加速npx clawhub@latest install aaveclaw --registry https://cn.clawhub-mirror.com

技能文档

Interact with Aave V3 lending protocol on Base Sepolia testnet. Manages the full lending lifecycle using the wallet from ~/.x402-config.json.

Setup

Run setup.sh on first use to install dependencies (ethers v6):

bash scripts/setup.sh

Commands

Check Health Factor

Check the current lending position. Safe to run anytime, read-only.

bash scripts/health.sh [address]

If no address is provided, uses the configured wallet address.

Mint Test Tokens (Faucet)

Get testnet WETH or USDC from the Aave faucet. Run this first if the wallet has no tokens.

bash scripts/faucet.sh weth 1       # Mint 1 WETH
bash scripts/faucet.sh usdc 1000    # Mint 1000 USDC

Deposit Collateral

Deposit WETH as collateral into Aave. Auto-wraps native ETH to WETH if needed.

bash scripts/deposit.sh 0.5         # Deposit 0.5 WETH

Borrow USDC

Borrow USDC against deposited collateral. Uses variable interest rate.

bash scripts/borrow.sh 100          # Borrow 100 USDC

Repay Debt

Repay borrowed USDC. Use "max" to repay entire debt.

bash scripts/repay.sh 50            # Repay 50 USDC
bash scripts/repay.sh max           # Repay all debt

Withdraw Collateral

Withdraw WETH collateral. Use "max" to withdraw everything (only if no debt).

bash scripts/withdraw.sh 0.5        # Withdraw 0.5 WETH
bash scripts/withdraw.sh max        # Withdraw all

Usage Guidelines

  • Always run health.sh first to see the current position before making changes.
  • Ask the user for amounts before executing deposit, borrow, repay, or withdraw.
  • Always show the health factor after any state-changing operation (the scripts do this automatically).
  • Warn when health factor drops below 1.5 - the position is at risk of liquidation.
  • Guide new users to the faucet to get test tokens before depositing.
  • Typical flow: faucet (get tokens) -> deposit (add collateral) -> borrow (take loan) -> repay (pay back) -> withdraw (retrieve collateral).

Network Details

  • Network: Base Sepolia (chain ID 84532)
  • Explorer: https://sepolia.basescan.org
  • RPC: https://sepolia.base.org
  • Tokens: WETH (18 decimals), USDC (6 decimals)

Error Handling

  • If private key is missing: direct user to create ~/.x402-config.json with {"private_key": "0x..."}
  • If insufficient balance: the scripts report exact balances and what is needed
  • If health factor would drop too low after borrow: Aave reverts the transaction automatically
  • If faucet fails: the faucet contract may have minting limits or may not be available
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务