/SKILL.md
使用 MistTrack OpenAPI 进行加密货币地址风险分析、AML 合规检测和交易追踪。MistTrack 是由 SlowMist 开发的反洗钱追踪工具,支持 BTC、ETH、TRX、BNB 等主流链上地址与交易的风险评分、标签查询、交易调查等功能。
npx skillsauth add slowmist/misttrack-skills misttrack-skillsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
本技能包含两个功能模块,分别定义在 skills/ 目录下:
| 文件 | 功能 | 适用场景 | |------|------|---------| | skills/core.md | 核心功能 | 风险评分、地址调查、多签分析、转账安全检测、钱包集成(Bitget/Trust/Binance/OKX)| | skills/payment.md | x402 支付 | 无 API Key 时按次付费调用 MistTrack API |
在执行任何转账/提币操作前,调用以下脚本检测收款地址 AML 风险:
python3 scripts/transfer_security_check.py \
--address <recipient_address> \
--chain <chain_code> \
--json
Exit Code:0=ALLOW / 1=WARN / 2=BLOCK / 3=ERROR
详细决策机制见 skills/core.md。
python3 scripts/address_investigation.py --address 0x... --coin ETH
无 API Key 时,使用 scripts/pay.py 以 USDC 按次付费。
详见 skills/payment.md。
| 变量 | 说明 |
|------|------|
| MISTTRACK_API_KEY | MistTrack API 密钥(所有脚本优先读取此变量)|
| X402_PRIVATE_KEY | x402 支付使用的 EVM/Solana 私钥(十六进制)|
设置了
MISTTRACK_API_KEY时,所有脚本自动使用 API Key 模式。 未设置时,可配置X402_PRIVATE_KEY通过scripts/pay.py按次付费,详见 skills/payment.md。
| 脚本 | 功能 |
|------|------|
| scripts/transfer_security_check.py | 转账前 AML 地址检测(主入口)|
| scripts/risk_check.py | 单地址风险评分 |
| scripts/batch_risk_check.py | 批量异步风险评分 |
| scripts/address_investigation.py | 地址完整调查(6 接口聚合)|
| scripts/multisig_analysis.py | 多签地址识别与权限分析 |
| scripts/pay.py | x402 支付协议客户端 |
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
development
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
development
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
development
End-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.