📦 Abstract Toolkit — 智能合约部署跨链
v1.0.0一键在 Abstract（ZK Stack L2）部署智能合约、桥接 ETH/代币、DEX 交易、查余额、转账及与主网交互，集成 zksolc 编译、Hardhat、Relay 桥接与主流合约地址。
2· 1.4k·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
Before installing or running this skill:
- Treat WALLET_PRIVATE_KEY as highly sensitive. Do not set your main wallet private key in an environment variable for untrusted code. Prefer a throwaway/test account or hardware-wallet-backed signing.
- The skill metadata does not declare required env vars (WALLET_PRIVATE_KEY, DEX_ROUTER). That mismatch is a red flag — expect to supply these to run write operations.
- Inspect and, if necessary, pin the npm dependencies locally (ethers, zksync-ethers, @ab...详细分析 ▾
ℹ 用途与能力
Name/description match the included scripts: deployment, bridging, token transfer, swaps, AGW creation. The requested runtime behavior (signing transactions, calling RPCs, sending funds) is coherent with a blockchain toolkit. However the registry metadata declares no required env vars/credentials while the SKILL.md and scripts clearly require WALLET_PRIVATE_KEY (and optionally DEX_ROUTER), so the declared requirements do not match what the skill actually needs.
✓ 指令范围
SKILL.md and scripts are explicit about actions to take: reading ABI/artifact files, using WALLET_PRIVATE_KEY to sign transactions, calling RPC endpoints, sending transactions to relay depositor and DEX router addresses. All file and network accesses are within the expected domain for on-chain operations (no unrelated filesystem or system-wide config reads).
ℹ 安装机制
This is instruction-only (no install spec) but includes multiple Node scripts that rely on npm packages (ethers, zksync-ethers, @abstract-foundation/agw-client, viem, Hardhat plugin). The SKILL.md lists the npm dependencies but does not provide an automated install step; users must run npm install themselves. No high-risk URL downloads or extract/install actions are present in the skill bundle.
⚠ 凭证需求
The scripts require WALLET_PRIVATE_KEY (sensitive) for any write/transfer/deploy operations and DEX_ROUTER is required for swaps, but the skill metadata declares no required environment variables or primary credential. Asking for a private key is legitimate for this functionality, but the omission from declared requirements and lack of guidance on secure handling increases the risk of accidental misuse or exposure.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or system-wide settings. It runs as invoked and relies on environment variables at runtime; autonomous invocation is allowed by default but not excessive here given the purpose.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/5
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install abstract-toolkit
镜像加速npx clawhub@latest install abstract-toolkit --registry https://cn.longxiaskill.com