treasures
Manage Tokenized Stock and USDC Operations
Tokenized asset workflows combine multiple APIs, wallets, chains, signatures, and jurisdiction rules. This skill organizes Treasures Finance discovery, portfolio, quote, trade, bridge, and troubleshooting steps.
安装前请停下并请求确认。
请审查安装计划,并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体,其中包含权威 Skill 页面和清单。
Review the Skillstore skill "treasures" from https://skillstore.io/skills/starchild-ai-agent-treasures.md and its manifest at https://skillstore.io/api/skills/starchild-ai-agent-treasures/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划,并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文,而不是读取完整页面时,请使用这些链接。
测试它
正在使用“treasures”。 Summarize the portfolio for an Ethereum wallet without making changes.
预期结果:
- Wallet network: Ethereum
- Tokenized equity positions: GOOGL and NVDA
- Settlement asset: USDC
- Action taken: None
正在使用“treasures”。 Prepare a quote to sell 0.01 GOOGL with one percent maximum slippage.
预期结果:
Quote preparation is ready. Confirm wallet, jurisdiction eligibility, expected proceeds, fees, and slippage before any signature or submission.
正在使用“treasures”。 Explain why the quote returned HTTP 451.
预期结果:
The request reached a geographic access control before authentication. Do not treat this as a signature error or bypass an eligibility restriction.
安全审计
高风险All 54 static alerts are false positives caused by Markdown formatting, expected API examples, defensive proxy guidance, and an HTTP error code. However, the skill explicitly teaches agents to route geo-fenced securities requests through VPN exits. A prose warning cannot enforce eligibility, so these bypass instructions create material legal and financial abuse risk.
已确认安全问题 (2)
风险因素
⚙️ 外部命令 (37)
🌐 网络访问 (15)
🔑 环境变量 (1)
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据,不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/starchild-ai-agent-treasures/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/starchild-ai-agent-treasures?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/starchild-ai-agent-treasures?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/starchild-ai-agent-treasures/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/starchild-ai-agent-treasures.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
starchild-ai-agent. (2026). treasures security audit report (audit version 1) [Author version 1.0.3]. Skillstore. https://skillstore.io/skills/starchild-ai-agent-treasures/audits/1BibTeX 引用
@techreport{starchild-ai-agent-starchild-ai-agent-treasures-2026,
author = {starchild-ai-agent},
title = {treasures security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/starchild-ai-agent-treasures/audits/1},
note = {Author version 1.0.3}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "treasures security audit report (audit version 1)"
version: "1.0.3"
type: report
authors:
- name: "starchild-ai-agent"
date-released: "2026-07-27"
url: "https://skillstore.io/skills/starchild-ai-agent-treasures/audits/1"
identifiers:
- type: other
value: "skillstore:starchild-ai-agent-treasures:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中你能构建什么
Review a Wallet Portfolio
Summarize tokenized stock positions and trade history without preparing a transaction.
Prepare an Eligible Trade
Collect a quote, validate the wallet and chain, then present details for approval before execution.
Diagnose API Failures
Separate routing, request schema, signature, and insufficient holdings errors during integration testing.
试试这些提示
List the tokenized stocks available through Treasures Finance. Show ticker, provider, supported chain, and quote currency. Use read-only endpoints.
Review the Treasures portfolio for wallet [address] on [chain]. Summarize positions and recent trades. Do not sign or submit anything.
For an eligible user in [jurisdiction], prepare a [buy or sell] quote for [ticker] and [amount]. Present all costs and await approval.
Plan a USDC bridge from [source chain] to [destination chain], followed by a [ticker] trade. Identify every approval, signature, fee, and failure checkpoint.
最佳实践
- Verify jurisdiction, KYC status, and token eligibility before requesting a trade quote.
- Require explicit user approval immediately before every wallet signature and transaction submission.
- Confirm wallet, chain, ticker, amount, fees, slippage, and destination at each step.
避免
- Do not use a VPN to bypass a geographic or securities eligibility restriction.
- Do not set a global HTTP_PROXY value for all agent traffic.
- Do not select a wallet API without confirming where the user assets are held.
常见问题
Can this skill execute trades?
Which networks are covered?
Which wallet route should I use?
What does an HTTP 451 response mean?
Does the skill require credentials?
Does this skill provide financial or legal advice?
开发者详情
许可证
MIT
作者版本
v1.0.3
Skillstore 修订
r1
引用
7014d51800335b375ec9e0068a94267aaef4015b
维护新鲜度
2026/7/28
使用量
0 次下载 · 0 次浏览