技能 near-intents
📦

near-intents

内容修订 r1 高风险 ⚙️ 外部命令🌐 网络访问🔑 环境变量

构建 NEAR Intents 兑换集成

跨链兑换集成需要谨慎处理报价、充值和状态。此技能为 Claude、Codex 和 Claude Code 提供专注于 NEAR Intents 1Click 的指导。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "near-intents" from https://skillstore.io/skills/internet-court-near-intents.md and its manifest at https://skillstore.io/api/skills/internet-court-near-intents/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/internet-court-near-intents.md 已签名 manifest GET /api/skills/internet-court-near-intents/manifest 已签名 lockfile GET /api/skills/internet-court-near-intents/lockfile

测试它

正在使用“near-intents”。 解释如何预览从 USDC 到 wNEAR 的兑换。

预期结果:

提供一个简洁流程，涵盖代币查询、试算报价字段、金额单位、接收地址与退款地址，以及报价显示规则。

正在使用“near-intents”。 为 EVM 用户规划一个 React 兑换组件。

预期结果:

提供一个组件方案，涵盖代币选择、钱包状态、报价刷新、链检查、交易确认和终止状态显示。

正在使用“near-intents”。 在投入生产使用前审查一个服务端兑换脚本。

预期结果:

提供一份风险检查清单，涵盖私钥托管、API 密钥处理、报价验证、滑点限制、重试、监控和退款处理。

安全审计

高风险
v2 • 2026/7/21 打开版本化报告

Static detections are false positives caused by Markdown and TypeScript syntax, expected API calls, and explicit configuration examples. The skill nevertheless documents an unattended server-side flow that signs and broadcasts live cryptocurrency transfers, so production users need strong transaction controls.

18
已扫描文件
2,052
分析行数
0
复核项
0
已忽略误报

已确认安全问题 (1)

高
rules/server-example.md:29-30rules/server-example.md:89-93rules/server-example.md:150-190
Unattended live swap example can sign and transfer funds
The server example obtains a committed quote, creates an account from a private key, and broadcasts a token or native-token deposit without an interactive approval step. Deploying this pattern without transaction controls can transfer funds after compromised or unintended input.
The documented flow explicitly creates a wallet account from an environment private key and calls contract transfer or native transaction methods after requesting a non-preview quote.

风险因素

⚙️ 外部命令 (50)
references/concepts.md:50-51 rules/api-any-input-withdrawals.md:11-12 rules/api-any-input-withdrawals.md:12-15 rules/api-any-input-withdrawals.md:58-59 rules/api-any-input-withdrawals.md:59-62 rules/api-any-input-withdrawals.md:62-67 rules/api-any-input-withdrawals.md:67-70 rules/api-any-input-withdrawals.md:70-72 rules/api-deposit-submit.md:14-21 rules/api-status.md:11-12 rules/api-status.md:12-15 rules/api-status.md:60-64 rules/api-status.md:64-78 rules/deposit-evm.md:17-20 rules/deposit-evm.md:31-34 rules/deposit-evm.md:34-36 rules/react-hooks.md:26-45 rules/react-hooks.md:45-49 rules/react-hooks.md:49-68 rules/react-hooks.md:68-69 rules/react-hooks.md:69-90 rules/react-hooks.md:90-94 rules/react-hooks.md:94-103 rules/react-hooks.md:103-105 rules/react-hooks.md:105-113 rules/react-swap-widget.md:107-128 rules/react-swap-widget.md:128-132 rules/react-swap-widget.md:132-153 rules/react-swap-widget.md:153-154 rules/react-swap-widget.md:154-186 rules/react-swap-widget.md:186-190 rules/react-swap-widget.md:190-209 rules/react-swap-widget.md:209-213 rules/react-swap-widget.md:213-322 rules/react-swap-widget.md:322-332 rules/react-swap-widget.md:332-335 rules/react-swap-widget.md:335-340 rules/react-swap-widget.md:340-394 rules/react-swap-widget.md:394-408 rules/react-swap-widget.md:408-462 rules/react-swap-widget.md:462-486 rules/server-example.md:29-70 rules/server-example.md:70-82 rules/server-example.md:82-86 rules/server-example.md:86-97 rules/server-example.md:97-103 rules/server-example.md:103-107 rules/server-example.md:107-118 rules/server-example.md:118-119 rules/server-example.md:119-123
🌐 网络访问 (50)
rules/api-any-input-withdrawals.md:10 rules/api-any-input-withdrawals.md:57 rules/api-any-input-withdrawals.md:11 rules/api-any-input-withdrawals.md:58 rules/api-deposit-submit.md:10 rules/api-deposit-submit.md:33 rules/api-deposit-submit.md:47 rules/api-deposit-submit.md:10 rules/api-deposit-submit.md:33 rules/api-deposit-submit.md:47 rules/api-quote.md:160 rules/api-quote.md:181 rules/api-quote.md:208 rules/api-quote.md:230 rules/api-quote.md:160 rules/api-quote.md:181 rules/api-quote.md:208 rules/api-quote.md:230 rules/api-status.md:10 rules/api-status.md:63 rules/api-status.md:11 rules/api-status.md:64 rules/api-tokens.md:10 rules/api-tokens.md:10 rules/deposit-stellar.md:12 rules/deposit-stellar.md:12 rules/deposit-stellar.md:34 rules/intents-balance.md:12 rules/intents-balance.md:32 rules/intents-balance.md:12 rules/intents-balance.md:32 rules/intents-balance.md:58 rules/passive-deposit.md:11 rules/passive-deposit.md:11 rules/react-hooks.md:26 rules/react-hooks.md:45 rules/react-hooks.md:68 rules/react-hooks.md:90 rules/react-hooks.md:103 rules/react-hooks.md:20 rules/react-swap-widget.md:107 rules/react-swap-widget.md:128 rules/react-swap-widget.md:153 rules/react-swap-widget.md:186 rules/react-swap-widget.md:209 rules/react-swap-widget.md:40 rules/server-example.md:70 rules/server-example.md:82 rules/server-example.md:103 rules/server-example.md:117
🔑 环境变量 (15)
rules/api-quote.md:185 rules/react-swap-widget.md:485 rules/react-swap-widget.md:485 rules/react-swap-widget.md:485 rules/server-example.md:29 rules/server-example.md:30 rules/server-example.md:29 rules/server-example.md:30 rules/server-example.md:29 rules/server-example.md:30 rules/server-example.md:86 rules/server-example.md:107 rules/server-example.md:119 rules/server-example.md:150 rules/server-example.md:252
审计者: claude 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/internet-court-near-intents/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/internet-court-near-intents/security.svg)](https://skillstore.io/skills/internet-court-near-intents?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/internet-court-near-intents?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-near-intents/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/internet-court-near-intents.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

internet-court. (2026). near-intents security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-near-intents/audits/2

BibTeX 引用

@techreport{internet-court-internet-court-near-intents-2026, author = {internet-court}, title = {near-intents security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/internet-court-near-intents/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "near-intents security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "internet-court" date-released: "2026-07-21" url: "https://skillstore.io/skills/internet-court-near-intents/audits/2" identifiers: - type: other value: "skillstore:internet-court-near-intents:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
41
架构
85
可维护性
87
内容
65
社区
83
规范符合性

你能构建什么

创建兑换组件

构建一个 React 界面，用于预览报价、连接钱包、发送充值交易并显示兑换状态。

自动执行服务端兑换

使用 TypeScript 示例请求报价、发送 EVM 充值交易、提交交易哈希并轮询结果。

规划多链转账流程

在产品路线图中加入 NEAR Intents 支持之前，比较各链特有的充值规则。

试试这些提示

解释兑换流程 
使用 near-intents 向新开发者解释 NEAR Intents 1Click 兑换的生命周期。包括报价、充值、提交和状态步骤。
设计报价预览 
使用 near-intents 设计从 USDC 到 wNEAR 的试算报价预览。包括必填字段、验证和显示注意事项。
构建 React 组件 
使用 near-intents 规划一个 React 兑换组件，包括代币加载、钱包连接、报价预览、充值交易和状态轮询。
审查生产集成 
使用 near-intents 审查我规划的生产环境 NEAR Intents 集成。重点关注密钥处理、滑点、截止时间、退款地址和状态失败。

最佳实践

  • 使用试算报价进行预览，仅在用户准备好兑换时请求已确认报价。
  • 在执行任何充值交易之前，验证链、资产、金额、接收方、退款地址、截止时间和 memo。
  • 将签名密钥保存在服务端或用户钱包中，并按照最小权限原则处理 API 密钥。

避免

  • 不要将合作伙伴 API 密钥放在暴露给浏览器的环境变量中。
  • 在未向用户显示金额、资产、链和接收方详细信息的情况下，不要向充值地址发送资金。
  • 不要将仅用于显示的 USD 字段作为结算、会计核算或滑点执行值。

常见问题

此技能可以帮助构建什么？
它有助于构建用于报价、充值、状态轮询和多链兑换流程的 NEAR Intents 1Click 集成。
它会自行执行兑换吗？
不能。它提供指导和示例。用户或生成的应用程序必须批准并发送交易。
哪些工具可以使用它？
报告列出了对 Claude、Codex 和 Claude Code 的支持。
它是否无需修改即可用于生产环境？
不适合。生产使用需要进行安全审查，并具备密钥托管控制、错误处理、监控和用户确认流程。
它是否涵盖非 EVM 链？
是的。它包含有关 Solana、NEAR、TON、Tron、Stellar、EVM 链、intents 余额和被动充值流程的说明。
最大的安全隐患是什么？
这些示例可能会处理真实私钥和代币转账，因此交易验证和密钥管理至关重要。

开发者详情

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

仓库

https://github.com/internet-court/internet-court-skill/tree/main/vendored/near/near-intents

引用

3f6e026a3363e0954ede7bef0cfe88d4475de137

维护新鲜度

2026/7/21

使用量

1 次下载 · 0 次浏览

文件结构

📁 references/

📄 concepts.md

📁 rules/

📄 api-any-input-withdrawals.md

📄 api-deposit-submit.md

📄 api-quote.md

📄 api-status.md

📄 api-tokens.md

📄 deposit-evm.md

📄 deposit-near.md

📄 deposit-solana.md

📄 deposit-stellar.md

📄 deposit-ton.md

📄 deposit-tron.md

📄 intents-balance.md

📄 passive-deposit.md

📄 react-hooks.md

📄 react-swap-widget.md

📄 server-example.md

📄 SKILL.md

internet-court 的更多技能

查看全部

相关技能

查看全部