Token导航 LogoToken导航TokenDH.com
运维敏感数据clawhub未标认证来源可访问clear审计提醒

clawcontractclawcontract 分析

Agent Skill

clawcontract 用于辅助部署、云资源、容器和基础设施运维,适合在 OpenClaw 中需要检查配置、整理部署步骤或排查环境问题时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

总安装

24,529

周安装

1,002

GitHub Stars

公开资料未说明

下载量

7,936
OpenClaw

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

MIT-0

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:clawcontract(clawcontract 分析)
来源仓库:https://github.com/sufnoobzac/clawcontract
安装命令:
openclaw skills install clawcontract
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 OpenClaw 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

ClawHubOpenClaw
openclaw skills install clawcontract

简介

clawcontract 自动生成、分析与部署 BSC/opBNB 链智能合约。

  • 支持自然语言转 Solidity 并运行安全检查。
  • 通过 clawhub 安装,需结合原始 README 核验编译器版本。
  • 使用前应确认私钥管理策略及合约审计必要性。
  • 适合区块链开发者快速原型验证与上线部署。clawcontract 属于运维类 Skill,可作为该场景下的辅助能力补充。

SKILL.md

name
clawcontract
description
AI-powered smart contract generator, analyzer, and deployer for BNB Chain (BSC/opBNB). Use when you need to generate Solidity from natural language, run security analysis, compile and deploy contracts, verify source on BscScan/opBNBScan, interact with deployed contracts, or run the full generate→analyze→deploy→verify pipeline. Supports bsc-mainnet, bsc-testnet, opbnb-mainnet, opbnb-testnet.
homepage
https://github.com/cvpfus/clawcontract
metadata
{"openclaw":{"requires":{"bins":["clawcontract"],"env":["CLAWCONTRACT_OPENROUTER_API_KEY","CLAWCONTRACT_PRIVATE_KEY","CLAWCONTRACT_BSCSCAN_API_KEY"]},"install":[{"id":"clawcontract","kind":"node","package":"clawcontract","bins":["clawcontract"],"label":"Install clawcontract (npm)"}]}}

ClawContract

Generate, analyze, deploy, and verify smart contracts on BNB Chain via CLI.

Source & install: <https://github.com/cvpfus/clawcontract> — clone the repo, run pnpm install && pnpm build && npm link.

Quick Start

Generate a contract:

clawcontract generate "escrow contract for peer to peer trades with dispute resolution and timeout auto release"

Full pipeline (generate → analyze → deploy → verify):

clawcontract full "escrow contract for peer to peer trades with dispute resolution and timeout auto release" --chain bsc-testnet

Deploy an existing contract:

clawcontract deploy ./contracts/VibeToken.sol --chain bsc-testnet

Interact with a deployed contract:

clawcontract interact 0xABC... name --chain bsc-testnet

List deployment records:

clawcontract list clawcontract list --chain bsc-testnet

Delete a deployment record:

clawcontract delete 0xABC...def

References

  • Full command reference (all flags, examples, notes): See {baseDir}/references/commands.md

Supported Chains

KeyChainTestnet
bsc-mainnetBNB Smart ChainNo
bsc-testnetBNB Smart Chain TestnetYes
opbnb-mainnetopBNBNo
opbnb-testnetopBNB TestnetYes

Default: bsc-testnet.

Env Vars

Configure via docker-compose.yml or set directly in the environment.

VariableRequiredPurpose
CLAWCONTRACT_OPENROUTER_API_KEYYesAI contract generation
CLAWCONTRACT_PRIVATE_KEYFor deployWallet for deployment — must be supplied by user
CLAWCONTRACT_BSCSCAN_API_KEYFor verifyContract verification on BscScan/opBNBScan
CLAWCONTRACT_OPENROUTER_MODELNoModel override (default: anthropic/claude-sonnet-4-20250514)

Artifacts

The CLI writes the following files to disk during normal operation:

PathWhenContents
contracts/*.solgenerate, fullGenerated Solidity source
.deployments/*.jsondeploy, fullDeployment metadata (address, chain, tx hash)

Safety

  • No auto-generated keys. CLAWCONTRACT_PRIVATE_KEY must be explicitly provided by the user via environment variable. The CLI will not generate or persist a private key on its own.
  • Mainnet warning (non-blocking). Deployment to mainnet chains prints a bold warning about real costs but does not block on a prompt — the deploy proceeds automatically. This is by design: the CLI targets agent-driven pipelines where stdin is unavailable. Users control mainnet exposure by choosing --chain explicitly (default is bsc-testnet).
  • delete confirmation prompt. delete is the sole interactive command — it shows deployment details and asks Remove this deployment? (y/N). Use --force to skip the prompt (agent-friendly). This is safe because delete only removes local metadata; it cannot affect on-chain state.
  • Automatic fix attempts. During full, if high-severity issues are found the AI attempts to fix and re-analyze (up to 3 rounds). This means the agent may modify generated source before deploy. Mitigations:

- Use --skip-fix to disable auto-fix entirely. - Use --skip-deploy to review the final source and analysis before any on-chain action. - Fixes only target the generated file in contracts/; no other files are modified.

  • Accidental live-deploy risk. Because CLAWCONTRACT_PRIVATE_KEY is mandatory for deploy and the default chain is bsc-testnet, accidental mainnet deploys require the user to both set a funded mainnet key and explicitly pass --chain bsc-mainnet or --chain opbnb-mainnet. Neither can happen silently.
  • Prefer testnet chains and throwaway keys for initial trials.

适合场景

01

调用多模型

02

代码和文本生成

03

Agent 推理流程

04

OpenRouter 模型接入

能力概览

能力 1

统一调用多种 LLM

能力 2

支持 Claude、Gemini、Kimi 等模型

能力 3

适合聊天、代码和推理任务

能力 4

可作为 Agent 模型调用入口

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

OpenClaw

87.57%
按下载量换算6,950

安全审计

VirusTotal

可疑

ClawScan

通过

Static analysis

未展示

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置,应进入高风险复核队列,默认不自动发布。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills