steth-treasury
Facilitates interaction with stETH Agent Treasury contracts for yield-based budgeting, ensuring agents only spend accrued yield.
Install this skill
or
88/100
Security score
The steth-treasury skill was audited on May 29, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 33
Curl to non-GitHub URL
SourceSKILL.md
| 33 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x7f39C581F595B53c5cb19bD0b3f8dA6c935E |
medium line 71
Curl to non-GitHub URL
SourceSKILL.md
| 71 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"TREASURY_ADDRESS\",\"data\":\"0xQUERY_ |
low line 33
External URL reference
SourceSKILL.md
| 33 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x7f39C581F595B53c5cb19bD0b3f8dA6c935E |
low line 71
External URL reference
SourceSKILL.md
| 71 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"TREASURY_ADDRESS\",\"data\":\"0xQUERY_ |
Scanned on May 29, 2026
View Security DashboardGitHub Stars 57
Rate this skill
Categoryfinance accounting
UpdatedJune 10, 2026
openclawapicfo-fpafinancial-analystaccountantbusiness-developmentrevenue-operationsfinance accountingsales
jiayaoqijia/cryptoskill