What makes Web3 Ops notable?

987 downloads. Trust evidence available

How should Web3 Ops be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

Web3 Ops

Perform EVM Web3 on-chain operations such as checking addresses, scanning portfolios, transferring assets, swapping/bridging tokens, and minting NFTs. Skill: Web3 Ops Owner: nyxoraai Summary: Perform EVM Web3 on-chain operations such as checking addresses, scanning portfolios, transferring assets, swapping/bridging tokens, and minting NFTs. Tags: latest:1.1.4 Version history: v1.1.4 | 2026-05-31T08:35:53.294Z | user Security fix: Bypass false-positive scanner blocks. v1.1.3 | 2026-05-30T01:17:09.310Z | user Simplified Wallet and RPC Configuration in README. Transla

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

987

Updated

Oct 11, 2026

Version

1.1.4

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 987 downloads reported by the source. Last updated 10/11/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 11, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 11, 2026
Adoption signal: 987 downloadsadoption · observed Oct 11, 2026
Latest release: 1.1.4release · observed May 31, 2026
Handshake status: UNKNOWNsecurity

What changed

Newest first. Only changes that point at a source are listed.

Release 1.1.4release
Security fix: Bypass false-positive scanner blocks.
Observed May 31, 2026 · source

Install and run

Setup complexity: low.

clawhub skill install s178j0th5vzjs11fp3jfdz6n9d85yn06:web3-ops

Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-nyxoraai-web3-ops/snapshot"

Run-check

$0.02 USD

1 measured facts are behind this paywall: success rate and latency, uptime and estimated cost, when not to use it, how to call it, benchmark scores.

Agents pay $0.02 in USDC. A card payment is $0.50, the smallest a card allows.

Documentation

CLAWHUB

143,433 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

---
name: web3-ops
description: Perform EVM Web3 on-chain operations: check addresses, scan portfolios, transfer assets, swap/bridge tokens, mint NFTs, custom raw tx, PnL tracking, Cutloss/Takeprofit monitor, RSI/EMA trading signals, GoPlus contract security audits, whale tracking, anti-MEV route routing, and wallet creation.

env:
  - PRIVATE_KEY

requirements:
  bins:
    - node
---
# Secure AI-Native Web3 Operational Skill

This skill allows the OpenClaw AI agent to interface with EVM blockchains (Ethereum, Arbitrum, Base, Optimism, Polygon, BNB Chain, Sonic, Sepolia, etc.) using a local Node.js CLI utility under a strict Human-in-the-Loop safety model.


## Global Options

These flags can be appended to any command:
*   `--json`: Silences human logs and outputs strictly JSON to `stdout` (highly recommended for AI agent parsing).
*   `--rpc <url>`: Overrides default node RPC with a custom RPC endpoint (useful for testnets or private nodes).
*   `--simulate`: Simulates the transaction (dry run) using gas estimation and call simulation. Prevents sending failing transactions and calculates gas fees.

## CLI Commands & Arguments

All commands are run using Node.js inside the skill directory:
`node skills/web3-ops/index.js <command> [arguments]`

### 1. Get Wallet Address
Get your configured wallet address.
*   **Usage:** `node skills/web3-ops/index.js address [--json]`

### 2. Check Specific Balance
Check native coin (ETH, MATIC, BNB, S) or a specific ERC-20 token balance using symbol or contract address.
*   **Native Coin:** `node skills/web3-ops/index.js balance --chain <chain> [--json]`
*   **ERC-20 Token:** `node skills/web3-ops/index.js balance --chain <chain> --token <symbol_or_address> [--json]`
*   *Example:* `node skills/web3-ops/index.js balance --chain base --token AERO`

### 3. Scan Portfolio (New)
Scan and list all tokens with a positive balance in your wallet. If no chain is specified, it will scan all supported networks in parallel. Automatically detects "degen/micin" tokens using block explorer transaction history.
*   **Usage (All Chains):** `node skills/web3-ops/index.js portfolio [--json]`
*   **Usage (Single Chain):** `node skills/web3-ops/index.js portfolio --chain <chain> [--json]`

### 4. Transfer Coins or Tokens
Send native coins or ERC-20 tokens to another address.
*   **Native Coin:** `node skills/web3-ops/index.js transfer --chain <chain> --to <recipient_address> --amount <amount> [--json] [--simulate]`
*   **ERC-20 Token:** `node skills/web3-ops/index.js transfer --chain <chain> --to <recipient_address> --amount <amount> --token <symbol_or_address> [--json] [--simulate]`

### 5. Swap Tokens (Same-Chain)
Swap tokens on the same blockchain network. Supports auto-routing and manual routers.
*   **Auto Mode (Li.Fi Aggregator):**
    `node skills/web3-ops/index.js swap --chain <chain> --fromToken <symbol_or_address> --toToken <symbol_or_address> --amount <amount> --mode auto [--json] [--simulate]`
*   **Manual Mode (Uniswap/

README.md

# OpenClaw Web3 Operations Skill

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
[![Security: Security-First](https://img.shields.io/badge/Security-Security--First-blue.svg)](#)
[![Execution: Human-in-the-Loop](https://img.shields.io/badge/Execution-Human--in--the--Loop-orange.svg)](#)
[![Privacy: Local-Only Keys](https://img.shields.io/badge/Privacy-Local--Only--Keys-success.svg)](#)

![Skill-Web3 Logo](assets/logo.png)

A **secure, non-custodial, AI-native Web3 operational skill with explicit execution safety** built with Node.js and Ethers.js v6. Designed for agentic workflows to execute wallet operations with client-side key isolation. It operates under a strict **Human-in-the-Loop** execution model, requiring explicit operator approval for any on-chain transaction.

---



## Key Features

### Advanced Trading & Security Features (New in v1.1.0)
*   **Wallet Generation (`create-wallet`)**: Generate a random EVM address, private key, and mnemonic locally. Automatically saves them to the `.env` file with secure overwrite protection.
*   **PnL Tracker (`pnl`)**: Automatically parses incoming/outgoing token transfers via Block Explorer APIs to compute the weighted average cost basis (Avg Buy Price) of your holdings. Compares this with real-time market prices from DexScreener to calculate net USD profit/loss (PnL) and percentage ROI.
*   **Cutloss & Takeprofit Monitor (`monitor`)**: Run active price monitoring in the foreground. Configurable with cutloss and takeprofit bounds (nominal USD or percentage-based). Executes a pre-authorized safety swap to USDC via the Li.Fi aggregator when price boundaries are crossed.
*   **Technical Trading Signals (`signal`)**: Fetches daily candle data (OHLCV) via the GeckoTerminal API to calculate **RSI (14)** and **EMA (20/50)** crossovers, returning trade recommendations (`STRONG BUY`, `BUY`, `NEUTRAL`, `SELL`, or `STRONG SELL`).
*   **Smart Contract Audit (`analyze`)**: Integrates GoPlus Security API to audit token contracts. Detects Honeypots, Buy/Sell taxes, Mintable supplies, Proxy configurations, and Ownership statuses to return a comprehensive security score.
*   **Whale tracker (`whales`)**: Scans recent block explorer token transfers to filter and detect transfers exceeding user-defined USD thresholds (default: $50,000).
*   **Anti-MEV Protection (`--anti-mev`)**: Routes transactions on supported networks (Ethereum, Polygon, BSC) through private RPC nodes (e.g. Flashbots Protect, BloXroute) to defend against sandwich attacks by searchers.
*   **Agent-Ready Alerts (`--alert`)**: Commands like `monitor`, `signal`, and `whales` support a `--alert` flag that embeds specific JSON alert payloads when targets are hit, enabling instant Telegram/Discord broadcast hooks.


### Core Features
*   **Dynamic Token Resolution**: No more manual contract address lookups. Enter symbols like `USDC`, `AERO`, or `PEPE` directly—the tool dynamically resolves them t

_meta.json

{
  "ownerId": "kn7b8hnz0597q77crbq7j7ntz985z939",
  "slug": "web3-ops",
  "version": "1.1.4",
  "publishedAt": 1780216553294
}

SECURITY.md

# Security Policy and Architecture

This document describes the security protocols, threat model, architectural safeguards, and vulnerability reporting procedures for the **OpenClaw Web3 Operations Skill** (`web3-ops`). 

As a non-custodial CLI tool and AI agent skill capable of executing blockchain transactions, security is our absolute design priority.

---

## 🔒 1. Cryptographic Key Management (Zero-Knowledge Architecture)

The `web3-ops` skill is engineered to ensure that your cryptographic keys (private keys or seed phrases) remain completely secure, private, and localized.

```mermaid
graph TD
    A[AI Agent / LLM Interface] -->|1. Generates CLI Command| B(web3-ops Runtime)
    subgraph Local Secure Host Sandbox
        B -->|2. Loads Secrets| C[.env File / Host Process]
        B -->|3. Signs Tx Client-Side| D[Ethers.js Signer]
        D -->|4. Private Key Purged| E((RAM Garbage Collection))
    end
    D -->|5. Sends Broadcast Tx Only| F[Blockchain Network]
    style C fill:#f9f,stroke:#333,stroke-width:2px
    style D fill:#bbf,stroke:#333,stroke-width:2px
    style A fill:#ffb,stroke:#333,stroke-width:2px
```

### Key Safeguards:
*   **Zero-Knowledge to AI Agent (LLM)**: Large Language Models (LLMs) and remote AI Agents interacting with this tool **never** see or handle your private keys or seed phrases. The LLM only generates CLI parameters (e.g., `--chain`, `--to`, `--token`) and reads public `stdout` results (e.g., transaction hashes, transaction statuses, and balances).
*   **Local-First Transaction Signing**: All cryptographic operations, key derivation, and transaction signing occur strictly client-side within the local Node.js runtime memory using `ethers.js`. Keys are never sent to third-party endpoints, proxy servers, or LLM providers.
*   **Volatile In-Memory Lifecycle**: Your private keys are loaded into system memory only during command execution and are instantly purged when the process terminates. No keys are cached or written to local log files.

---

## 🛡️ 2. Threat Model & Permission Boundaries

To ensure developer and operator confidence, we explicitly define the access limits, capabilities, and system requirements of the `web3-ops` execution loop:

### A. Skill Capabilities & Limits Matrix

| Parameter | Capability / Status | Technical Implementation Detail |
| :--- | :--- | :--- |
| **Can Access** | **YES** | Local `.env` file, blockchain RPC nodes, and public price/security APIs (DexScreener, GeckoTerminal, GoPlus). |
| **Cannot Access** | **NO** | Host filesystem outside the project directory, system settings, user credentials, or other system environment variables. |
| **Execute Shell** | **NO** | The skill does **not** execute arbitrary shell commands. It does not run scripts, compile external code, or invoke shell interpreters (`sh`, `bash`, `cmd`). It maps strict input arguments to predefined static functions using the `commander` package. |
| **Sign Transactions** | **YES** | The skill signs transaction payl

skill-card.md

## Description:

Perform EVM Web3 on-chain operations such as checking addresses, scanning portfolios, transferring assets, swapping or bridging tokens, minting NFTs, tracking PnL, monitoring token prices, generating trading signals, auditing token contracts, tracking whale transfers, and creating wallets.

This skill is ready for commercial/non-commercial use.

## Publisher:

[nyxoraai](https://clawhub.ai/user/nyxoraai)

### License/Terms of Use:

MIT-0

## Use Case:

External users and developers use this skill to let an agent prepare and run EVM wallet, portfolio, token transfer, swap, bridge, NFT minting, trading-signal, and contract-audit workflows through a local Node.js CLI or MCP tool surface. It is intended for operator-directed Web3 operations where transaction parameters and outputs are reviewed before funds are put at risk.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: Fund-moving tools can transfer assets, swap or bridge tokens, mint NFTs, broadcast custom transactions, and run monitored sell actions.

Mitigation: Use a dedicated low-value wallet, simulate first where possible, and add independent confirmation plus spending limits before enabling transaction-capable MCP tools.

Risk: Wallet secrets may become available to agent-connected workflows through .env or MCP configuration.

Mitigation: Do not place a main wallet private key or mnemonic in an agent-accessible environment; keep production keys outside the agent runtime.

Risk: The create-wallet command prints and writes recovery material, making terminal output and logs sensitive.

Mitigation: Run wallet generation only in a local trusted terminal, handle the printed private key and mnemonic as secrets immediately, and clear exposed history or logs.

## Reference(s):

- [ClawHub Web3 Ops Skill Page](https://clawhub.ai/nyxoraai/skills/web3-ops)
- [Publisher Profile](https://clawhub.ai/user/nyxoraai)
- [README](artifact/README.md)
- [Security Policy and Architecture](artifact/SECURITY.md)
- [Skill Definition](artifact/SKILL.md)

## Skill Output:

**Output Type(s):** [text, markdown, shell commands, configuration, guidance, JSON]

**Output Format:** [Markdown guidance with inline shell commands and JSON command output]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [Can emit transaction hashes, explorer links, balances, audit summaries, trading indicators, whale alerts, and wallet recovery material depending on the command.]

## Skill Version(s):

1.1.4 (source: server release metadata and package.json)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Github ReposUpdated 3d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW

Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular