360 Secure SkillHub
360 安全技能中心

Solana Scam Detector

该 Skill 通过 Solana RPC 读取链上数据,对指定代币铸币地址做三项只读检查:代币年龄是否低于阈值、代码是否仿冒股票代码、是否命中已知诈骗铸币黑名单,并返回 safe、issues 与生效配置。明确声明不签名、不发送交易、不存交易历史,也不索取钱包密钥或社交账号。

ammkode
ammkode
热度 83.11
最近更新 2026-05-11 17:38:25
分类:安全依赖:代码执行 / 第三方 API应用场景:API 集成 / 财务 / 市场分析 / 推荐

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add solana-scam-detector
Metadata
name
solana-scam-detector
description
Detect scam tokens on Solana before you trade. Checks ticker patterns, token age, and known scam mints. Read-only — no wallet signing required.
metadata
{"openclaw":{"requires":{"bins":["node"],"modules":["@solana/web3.js"]},"env":{"RPC_URL":"Solana RPC endpoint (optional, default: public RPC)"}}}

Solana Scam Detector

Read-only scam detection for Solana tokens. No wallet signing required.

What It Does

  • Token Age Check — Flags tokens younger than threshold
  • Ticker Pattern Check — Flags fake stock tokens (META, AAPL, etc.)
  • Mint Blacklist — Check against known scam mints

Read-Only

This module only reads blockchain data. It does NOT:

  • ❌ Require wallet key file
  • ❌ Require Telegram ID
  • ❌ Store trade history
  • ❌ Send any transactions

Installation

npm install @solana/web3.js

Configuration

Required: None (uses default public RPC)

Optional (agent can ask user):

  • RPC_URL — Custom RPC endpoint (default: public RPC)
  • MIN_TOKEN_AGE_HOURS — Minimum hours (default: 4)

Usage

const { checkTokenSafety, isValidSolanaAddress } = require('./lib/scam_check.js');

// Validate address first
if (!isValidSolanaAddress(mint)) {
  console.log('Invalid address');
  return;
}

// Check token
const result = await checkTokenSafety(mint, symbol);
console.log(result);
// { safe: true, issues: [], config: {...} }

Agent Instructions

Keep it simple — this is read-only:

  1. Use default public RPC or ask user for their RPC URL
  2. Optionally ask user for MIN_TOKEN_AGE_HOURS preference
  3. Optionally allow user to add to BLACKLIST_EXACT / BLACKLIST_MINTS
  4. Never ask for wallet key, Telegram ID, or trade history

Files

  • lib/scam_check.js — Main detection logic (read-only)
  • lib/config.js — Minimal config (RPC URL only)
  • SKILL.md — This file