Senddy

Create and manage private stablecoin wallets using Senddy's zero-knowledge protocol on Base. Use when building payment agents, bots, server-side apps, or any...

This skill is coherent for its purpose, but it handles highly sensitive secrets. Before installing or running it: 1) Treat AGENT_SEED_HEX as full-control private key material — store it only in a secure secret manager, never commit it to source, and avoid placing it in environment variables on shared machines if you can use more secure secret injection. 2) Review and audit the npm package @senddy/node before installing (supply-chain risk). 3) If you run the provided daemon pattern, ensure the process is bound to localhost, monitor which port it prints, and don't expose it to untrusted networks. 4) Be cautious with the attestorUrl/relayerUrl overrides — only point them to endpoints you trust (a malicious relayer/attestor could cause proof leakage or redirect funds). 5) Prefer short-lived API keys and least-privilege credentials and use secret managers rather than plaintext files where possible.

Type: OpenClaw Skill Name: senddy Version: 0.1.1 The skill bundle provides functionality for a private stablecoin wallet using zero-knowledge proofs. All code examples and instructions, including the recommended persistent daemon, align with the stated purpose of managing and transferring USDC privately. The skill appropriately accesses environment variables for API keys and seeds, uses `node:crypto` for seed generation, and `node:fs` for secure seed storage and caching. Network communication is directed to legitimate Senddy and Base blockchain endpoints. There is no evidence of intentional harmful behavior, data exfiltration, backdoors, or malicious prompt injection attempts in the documentation or code examples. The local HTTP daemon binds to `127.0.0.1`, limiting its exposure.