📦 Wallet Balance Checker — 钱包余额检查器
v1.1.0钱包余额检查工具，快速查询加密货币钱包余额和资产价值。
0· 89·0 当前·0 累计
by 下载技能包
最后更新
2026/3/25
安全扫描
OpenClaw
可疑
high confidenceThe skill's description promises multi-platform balance checks but the runtime instructions only implement Coinbase and there are mismatches in declared requirements (missing binaries and env var declarations), so the package is internally inconsistent and needs clarification before trusting with credentials.
评估建议
Do not supply sensitive API secrets or enable this skill until the inconsistencies are resolved. Ask the publisher for: (1) the full runtime instructions for Polymarket, Kalshi, and sportsbook integrations (the SKILL.md currently only implements Coinbase); (2) an explicit list of required binaries (the script uses openssl but openssl is not listed); and (3) confirmation of which environment variables are required (the registry summary claims none). If you test, use least-privilege, read-only API...详细分析 ▾
⚠ 用途与能力
The skill claims to check Coinbase, Polymarket (Polygon USDC), Kalshi, and sportsbook accounts, but the SKILL.md only contains a Coinbase balance-check implementation. Metadata also lists credentials for Kalshi and Polygon wallet/RPC, but no instructions use them — this is a clear mismatch between stated purpose and actual capability.
⚠ 指令范围
The runtime instructions contain a concrete Coinbase curl+jq script that computes an HMAC signature using openssl, reads COINBASE_API_KEY and COINBASE_API_SECRET, and queries api.coinbase.com. However, openssl (used in the script) is not listed in the required binaries, and there are no instructions for Polymarket/Kalshi/sportsbook despite those being advertised. The instructions therefore both omit needed runtime requirements and do not cover the advertised scope.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files; nothing is written to disk by the skill itself. That lowers installation risk.
⚠ 凭证需求
The skill requests sensitive credentials (Coinbase API key/secret, Kalshi API key, Polygon RPC URL, Polymarket wallet address) in its metadata. Requiring a Coinbase API secret is reasonable for Coinbase access, but Kalshi/Polygon credentials are declared yet unused in the provided instructions. Additionally, the registry summary at the top says 'Required env vars: none' which contradicts the SKILL.md — a concerning inconsistency when secrets are involved.
✓ 持久化与权限
The skill does not request always:true and uses default invocation settings; it does not request persistent/privileged platform presence. No evidence it modifies other skills or writes global settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/25
Add attribution links to agentbets.ai guides
● 无害
安装命令
点击复制官方npx clawhub@latest install wallet-balance-checker
镜像加速npx clawhub@latest install wallet-balance-checker --registry https://cn.longxiaskill.com