← Back to Skills Marketplace
fmacmak

Raven Transfer

by Fmac · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
321
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install raven-transfer
Description
Wallet-aware Raven Atlas transfer operations for NGN payouts. Use when an agent must check wallet balance, resolve Nigerian bank accounts, enforce explicit c...
Usage Guidance
This package appears to implement legitimate Raven NGN payout operations and correctly requires a Raven API key and a local state file for idempotency. However: (1) the registry metadata shown with the published skill incorrectly lists no required environment variables and no primary credential — confirm that your agent runtime will supply RAVEN_API_KEY_FILE or RAVEN_API_KEY before installing; (2) SKILL.md and agents/openai.yaml ask that implicit model invocation be disabled to prevent accidental autonomous transfers — make sure the skill is not allowed to run implicitly/autonomously in your agent configuration; (3) review and exclude scripts/.state/transfer-state.json from backups and source control (the package claims it stores only non‑PII idempotency fields, but verify you agree); (4) run the included validate-skill-package.mjs and unit tests in a safe environment (live transfer tests are intentionally gated) before enabling; (5) treat this as high-impact software — it can move money, so if you cannot verify the registry metadata and agent policies match the package docs, do not install or provide production API keys. If the publisher can correct the registry metadata (declare the required env and primary credential and set disable-model-invocation), confidence in installing this skill would increase.
Capability Analysis
Type: OpenClaw Skill Name: raven-transfer Version: 1.1.0 The raven-transfer skill bundle is a well-architected tool for managing NGN payouts via the Raven Atlas API. It includes robust safety features such as mandatory confirmation tokens to prevent accidental execution, idempotency checks via local state to prevent double-spending, and strict file permission enforcement (chmod 600) for API key storage. The implementation in scripts/raven-transfer.mjs demonstrates high security awareness by explicitly stripping PII (account numbers/names) before persisting state and implementing comprehensive log redaction for sensitive tokens and headers.
Capability Assessment
Purpose & Capability
The code, README, SKILL.md, and agent metadata all implement wallet-checked NGN transfers via Raven Atlas and require a Raven API key; that capability matches the skill name and description. However, the registry-level metadata claims no required environment variables or primary credential while the package clearly requires RAVEN_API_KEY_FILE or RAVEN_API_KEY. This inconsistency is unexpected and should be resolved.
Instruction Scope
SKILL.md and the scripts only instruct operations needed for payouts (balance, lookup, preview, confirm, execute, status). The runtime instructions reference only the Raven API and a local state file (.state/transfer-state.json). They explicitly forbid auto-retry for transfers and require explicit confirmation tokens, which is in-scope for the described purpose.
Install Mechanism
There is no remote install/download step; this is an instruction + local script package. All code is included in the bundle and there are no external URLs or archive extraction steps. Risk from install mechanism is low.
Credentials
The package legitimately requires a Raven API credential (file or env var) and several optional test/run-time overrides. Those are proportionate to payout functionality. The concern is that the registry metadata provided alongside the skill claims no required env vars/primary credential, conflicting with agents/openai.yaml and SKILL.md; that mismatch could lead to accidental missing protections or incorrect installation by users/automation.
Persistence & Privilege
The script persists a minimal idempotency state to scripts/.state/transfer-state.json with owner-only permissions by default and provides RAVEN_DISABLE_LOCAL_STATE to disable persistence. This is consistent with its purpose; ensure the .state directory is excluded from backups and VCS. The skill does not request always:true or other elevated platform privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install raven-transfer
  3. After installation, invoke the skill by name or use /raven-transfer
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
- Added CLI implementation script (`scripts/raven-transfer.mjs`) and supporting scripts for validation and testing. - Introduced `agents/openai.yaml` for runtime environment metadata. - Expanded test coverage with live contract and unit tests. - Updated documentation to reflect new package structure (`README.md`, process, and artifacts). - No changes to the core transfer process or environment requirements.
v1.0.1
- Improved documentation for failed transfer handling: added guidance on auto-reversals and retry checks. - Updated environment requirements: now prefers RAVEN_API_KEY_FILE and documents additional runtime safety, timeout, and endpoint options. - Added section on invocation policy, clarifying explicit invocation and disabling implicit model use. - Expanded configuration details and usage notes throughout reference files. - Removed unused scripts, agent config, and test files for a leaner skill footprint.
v1.0.0
raven-transfer 1.0.0 – Initial release - Introduces wallet-aware transfer operations for NGN payouts via Raven Atlas. - Ensures checks for wallet balance and explicit transfer confirmation tokens before execution. - Supports Nigerian bank account resolution and merchant settlement transfers. - Provides normalized results and strict idempotency, with no auto-retries. - Requires `RAVEN_API_KEY` in runtime environment for operation.
Metadata
Slug raven-transfer
Version 1.1.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 3
Frequently Asked Questions

What is Raven Transfer?

Wallet-aware Raven Atlas transfer operations for NGN payouts. Use when an agent must check wallet balance, resolve Nigerian bank accounts, enforce explicit c... It is an AI Agent Skill for Claude Code / OpenClaw, with 321 downloads so far.

How do I install Raven Transfer?

Run "/install raven-transfer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Raven Transfer free?

Yes, Raven Transfer is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Raven Transfer support?

Raven Transfer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Raven Transfer?

It is built and maintained by Fmac (@fmacmak); the current version is v1.1.0.

💬 Comments