📦 Yield Strategies — 链上收益策略
v0.1.0一键发现、存入并提取多链 DeFi 收益策略，自动比较利率、估算 Gas、管理仓位，让闲置加密资产持续生息。
0· 246·0 当前·0 累计
by 下载技能包
最后更新
2026/3/9
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill is coherent for managing DeFi yield, but it operates on your wallet through the fdx CLI and can initiate real on-chain transfers. Before installing/using: (1) Verify the fdx CLI binary you have is legitimate and from a trusted source; (2) Confirm how your wallet is authenticated to fdx (local keys, hardware wallet, or remote signer) and whether fdx can sign transactions without additional confirmation; (3) Always require explicit human confirmation before any deposit or withdrawal and...详细分析 ▾
✓ 用途与能力
Name and description match the instructions: the SKILL.md exclusively calls an fdx CLI to discover strategies, deposit, withdraw, and inspect wallet balances. All required capabilities (wallet auth, balance checks, strategy selection, deposits/withdrawals) are coherent with a DeFi yield-management skill.
ℹ 指令范围
Instructions are scoped to running fdx commands (status, discoverYieldStrategies, depositForYield, withdrawFromYield, getWalletOverview). They do not request unrelated files or environment variables. Note: the instructions require an authenticated wallet via the fdx tool, which implies access to private keys or a local key store controlled by fdx; the SKILL.md relies on the agent to run CLI commands that can sign transactions.
✓ 安装机制
Instruction-only skill with no install spec or code files — minimal disk/write risk. However, the skill depends on an external CLI (fdx) existing in the environment; the SKILL.md does not document where fdx comes from or how to verify it.
ℹ 凭证需求
The skill requests no environment variables or credentials directly. Nevertheless, it implicitly requires an authenticated wallet (managed by fdx) that can sign and send transactions. That implicit access is proportional to the task but is sensitive: it grants the ability to move funds. The skill allows specifying a custom recipient address for withdrawals — expected for functionality, but a potential abuse vector if combined with autonomous actions.
✓ 持久化与权限
always is false and disable-model-invocation is false (normal). The skill does not request persistent installation or system-wide configuration changes. Be aware that with disable-model-invocation=false the agent could invoke the skill autonomously to run transactions if allowed by the agent policy; this is a platform-level consideration, not an inconsistency in the skill itself.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/9
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install yield-strategies
镜像加速npx clawhub@latest install yield-strategies --registry https://cn.longxiaskill.com