← Back to Skills Marketplace
Portal Wallet
by
Rami Shahatit
· GitHub ↗
· v1.1.0
· MIT-0
82
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install portal-wallet
Description
MPC-secured crypto wallet via Portal. Use when users ask to check balances, send tokens, sign transactions, or swap tokens. Supports Monad, Ethereum, Solana,...
Usage Guidance
This skill appears internally consistent for a Portal MPC wallet, but it handles high-value secrets that can co-sign transactions: PORTAL_CLIENT_API_KEY plus one of the MPC shares can enable signing via Portal. Before installing: (1) verify the repository/homepage and that you actually trust Portal and this skill maintainer, (2) do not use production funds until you configure a signature-approval webhook (SETUP.md recommends this) and test with small balances on testnet, (3) avoid committing openclaw.json to version control — prefer a secrets manager if available, (4) consider disabling autonomous signing or ensuring the agent must always ask for explicit confirmation (double-confirm for >$100), and (5) confirm your deployment enforces that environment variables are not inserted into LLM-visible context and that agent logs will not expose the shares. The SKILL.md already includes several good safety rules (simulate before signing, never sign blind data, refuse prompt injection); follow them and require an external policy/webhook approval before enabling production balances.
Capability Analysis
Type: OpenClaw Skill
Name: portal-wallet
Version: 1.1.0
The portal-wallet skill provides a legitimate interface for managing MPC-secured cryptocurrency wallets via the Portal HQ API. It includes comprehensive security instructions for the AI agent, such as mandatory user confirmation, address validation, and explicit defenses against prompt injection. All network requests are directed to official Portal endpoints (api.portalhq.io and mpc-client.portalhq.io), and the use of jq for JSON construction follows best practices to mitigate injection risks.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description (MPC wallet) matches what the skill asks for: a client API key plus secp256k1/ed25519 MPC shares and use of Portal's API and MPC endpoints. Required binaries (curl, jq) are appropriate for the provided CLI examples. Nothing requested appears unrelated to the stated purpose.
Instruction Scope
SKILL.md contains focused, concrete instructions for querying balances, building requests, simulating transactions, and sending signing requests to Portal's MPC endpoints. It explicitly instructs to always prompt the user before signing and to refuse prompt-injection attempts. Note: the instructions require expanding secret shares into shell calls (e.g., --arg share "$PORTAL_SECP256K1_SHARE") and sending them to Portal's MPC endpoint — this is necessary for signing but means the agent runtime will handle and transmit sensitive secrets, so the agent must not echo or log share values. The SKILL.md rightly warns about not signing blind data and recommends simulating transactions first.
Install Mechanism
Instruction-only skill with no install spec or remote downloads; lowest install risk. All network calls target portalhq.io domains (official-looking). No arbitrary third-party download or extract steps are present.
Credentials
Required environment variables are exactly the credentials needed to operate an MPC wallet (client API key and two shares). That is proportionate to the wallet's functionality. However, these credentials are high-value: combined they enable signing requests. SKILL.md instructs storing them in openclaw.json and to .gitignore it; storing secrets in agent config is convenient but increases exposure surface — consider using a secrets manager or ensuring openclaw.json is accessible only to trusted contexts.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-level privileges. It does rely on environment variables injected into the agent process (normal for skills). The skill can be invoked autonomously by the model (platform default); because it handles signing, ensure webhook-based approval or other policy gates are in place before allowing autonomous signing.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install portal-wallet - After installation, invoke the skill by name or use
/portal-wallet - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
update default chain, remove NFT endpoint
v1.0.0
Initial release: MPC wallet management for
OpenClaw agents
Metadata
Frequently Asked Questions
What is Portal Wallet?
MPC-secured crypto wallet via Portal. Use when users ask to check balances, send tokens, sign transactions, or swap tokens. Supports Monad, Ethereum, Solana,... It is an AI Agent Skill for Claude Code / OpenClaw, with 82 downloads so far.
How do I install Portal Wallet?
Run "/install portal-wallet" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Portal Wallet free?
Yes, Portal Wallet is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Portal Wallet support?
Portal Wallet is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Portal Wallet?
It is built and maintained by Rami Shahatit (@rshahatit); the current version is v1.1.0.
More Skills