← Back to Skills Marketplace
Cardano Transactions
by
Angelos Kappos
· GitHub ↗
· v1.0.0
· MIT-0
296
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install cardano-transactions
Description
Sign and submit Cardano transactions with explicit user confirmation.
README (SKILL.md)
Cardano Transactions
Sign and submit Cardano transactions with explicit user confirmation.
Prerequisites
@indigoprotocol/cardano-mcpserver running
MCP Tools
submit_transaction— Sign and submit a Cardano transaction CBOR
When to use
Use this skill when the user asks to:
- Submit or send a Cardano transaction
- Sign a transaction with their wallet
- Broadcast a pre-built transaction
Safety model
This tool is dangerous. Before calling submit_transaction:
- Summarize the transaction in plain English.
- Ask the user to explicitly confirm.
- Only proceed if the user says yes.
- Never submit a transaction automatically.
Data interpretation
- Input requires unsigned transaction CBOR (hex string).
- Output includes
transactionHashandtimestampon success. - The transaction is signed by the connected wallet's keys.
Usage Guidance
Do not set your wallet seed phrase as an environment variable for this skill. Before installing, ask the author why SEED_PHRASE is required and whether signing can be done by a separate wallet/MCP service that holds the keys. If you must test, do so in an isolated environment with a throwaway wallet (no funds). Verify the npm package @indigoprotocol/cardano-mcp (publisher, homepage, source code) and confirm the MCP server endpoint is local/trusted. Prefer a workflow where the agent requests the MCP server to sign, and the agent never receives raw seed material. If the author cannot justify SEED_PHRASE being required, treat the skill as unsafe to use with real keys.
Capability Analysis
Type: OpenClaw Skill
Name: cardano-transactions
Version: 1.0.0
The skill bundle provides a legitimate interface for signing and submitting Cardano transactions using the @indigoprotocol/cardano-mcp server. It includes robust safety instructions in SKILL.md and sub-skills/submit-tx.md that mandate explicit user confirmation and a plain-English summary before any transaction is processed. While the skill requires a SEED_PHRASE environment variable for the underlying MCP server, the instructions are designed to prevent unauthorized or automated execution, and no evidence of malicious intent or data exfiltration was found.
Capability Assessment
Purpose & Capability
The skill's purpose (sign & submit Cardano transactions via an MCP tool) can normally be achieved by talking to a wallet/MCP server without the agent holding the seed phrase. Declaring SEED_PHRASE as a required env var is not consistent with the stated architecture (the docs explicitly say the seed is never exposed to the AI agent). The one declared install (@indigoprotocol/cardano-mcp) is appropriate for Cardano MCP functionality, so the main incoherence is the secret requirement.
Instruction Scope
SKILL.md instructs a safe confirmation flow (summarize transaction, ask explicit confirmation, only then call submit_transaction). However, the skill's metadata requires SEED_PHRASE while the prose states the seed phrase is never exposed — a direct contradiction. The allowed-tools include Read/Glob/Grep (file access/search) which could be used to read local secrets if the agent were permitted to act, creating scope creep relative to the minimal instructions.
Install Mechanism
Install is an npm package (@indigoprotocol/cardano-mcp). This is an expected mechanism for Cardano tooling (traceable on npm) and is moderate-risk but proportionate for the described capability. No arbitrary URL downloads or archive extracts are used.
Credentials
Requesting SEED_PHRASE is high privilege and should be unnecessary if an external MCP/wallet service signs transactions. The skill offers no justification for requiring this env var; moreover, its own documentation claims the seed is never exposed to the agent — a conflicting message. An env var named SEED_PHRASE is explicitly a secret-like credential and is disproportionate for a tool that should instead rely on the wallet/MCP service.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or system-wide config changes. There is no evidence it modifies other skills or agent settings. The only minor note is allowed-tools that permit reading files, which increases potential for accidental local-secret access if capabilities are misused.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install cardano-transactions - After installation, invoke the skill by name or use
/cardano-transactions - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Cardano Transactions?
Sign and submit Cardano transactions with explicit user confirmation. It is an AI Agent Skill for Claude Code / OpenClaw, with 296 downloads so far.
How do I install Cardano Transactions?
Run "/install cardano-transactions" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Cardano Transactions free?
Yes, Cardano Transactions is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Cardano Transactions support?
Cardano Transactions is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Cardano Transactions?
It is built and maintained by Angelos Kappos (@adacapo21); the current version is v1.0.0.
More Skills