← Back to Skills Marketplace
tilo-14

solana-token-distribution

by tilo-14 · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
372
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install solana-token-distribution
Description
For token distribution on Solana 5000x cheaper than SPL (rewards, airdrops, depins, ...). @lightprotocol/compressed-token (TypeScript). Reference examples fo...
Usage Guidance
This skill appears to be a legitimate guide for compressed-token airdrops and only requires a Helius RPC key and Node to run the provided TypeScript examples. Before using it: (1) verify the skill's source (follow the GitHub links in the SKILL.md) and test on devnet first; (2) never paste your wallet private key into a chat or untrusted UI — use a secure signing method or hardware wallet; (3) restrict or rotate your Helius API key if you decide to use it, and avoid giving broader credentials than required; (4) if the agent spawns subagents or reads files, confirm the scope (limit to docs/repos) so it doesn't access unrelated local data. If you need higher assurance, request the actual code files from the publisher or run the examples locally in an isolated environment.
Capability Analysis
Type: OpenClaw Skill Name: solana-token-distribution Version: 1.0.1 The skill bundle provides legitimate code patterns and documentation for Solana token distribution using TypeScript. The `SKILL.md` explicitly instructs the AI agent to limit file system access to the current project and skill references, and warns against hard-coding private keys, demonstrating a security-conscious design. All network calls are directed to the Solana RPC endpoint (Helius), and there is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`, `eval`), persistence mechanisms, or obfuscation. The required `HELIUS_API_KEY` is declared and handled via environment variables, which is a standard practice.
Capability Assessment
Purpose & Capability
Name/description (compressed-token airdrops) align with the declared requirements: node and HELIUS_API_KEY. The SKILL.md examples call Helius RPC endpoints and @lightprotocol libraries, which matches the stated purpose. Note: the registry lists no homepage and the skill source is 'unknown' in the registry metadata, while SKILL.md contains a GitHub metadata URL — provenance is plausible but not confirmed by the registry.
Instruction Scope
SKILL.md is an instruction-only guide with TypeScript examples for building, batching, and sending compressed-token transactions. The runtime instructions reference creating/signing transactions (requiring a payer key), using process.env.HELIUS_API_KEY (declared), and suggest spawning subagents with Read/Glob/Grep and DeepWiki MCP access when stuck. That subagent guidance could broaden read access if executed by an agent, so scope and data access should be limited to repo/docs only. The instructions do not directly request arbitrary system files, but they do require the user provide/sign with a private key (not declared as an env var).
Install Mechanism
No install spec and no code files to execute were provided by the skill bundle (instruction-only). This is low-risk from an install perspective because nothing is downloaded or written by the skill itself.
Credentials
The single required env var (HELIUS_API_KEY) is appropriate for using Helius RPC endpoints referenced in the examples. However, transaction signing requires a payer secret key; the skill does not declare a wallet secret env var but examples show Keypair.fromSecretKey(/* your key */). Users should not paste private keys into untrusted inputs — providing a signing key is necessary for operation but is sensitive and must be handled out-of-band or via secure signing.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It is user-invocable and allows model invocation (the platform default). There is no install step that modifies system or other skills' configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install solana-token-distribution
  3. After installation, invoke the skill by name or use /solana-token-distribution
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Updated Security section to clarify that both HELIUS_API_KEY and a payer keypair are required for mainnet execution; recommended using a secrets manager. - Added guidance against hard-coding private keys and clarified no need for secrets for read-only or localnet testing. - Added restriction that file-system read tools must be scoped to the project directory and skill references; do not read outside these paths. - No functional changes to distribution logic or workflow.
v1.0.0
- Initial release: enables efficient token distribution on Solana using compressed tokens, up to 5000x cheaper than traditional SPL tokens. - Provides TypeScript examples for airdrops, rewards, DePINs, and custom claim programs. - Includes cost comparisons, reference implementations (simple claim and distributor), and code for batch processing. - Documents requirements, dependencies (`HELIUS_API_KEY`, `node`), and security best practices. - Lists resources, API docs, and tools like Airship for no-code airdrops up to 200K recipients.
Metadata
Slug solana-token-distribution
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is solana-token-distribution?

For token distribution on Solana 5000x cheaper than SPL (rewards, airdrops, depins, ...). @lightprotocol/compressed-token (TypeScript). Reference examples fo... It is an AI Agent Skill for Claude Code / OpenClaw, with 372 downloads so far.

How do I install solana-token-distribution?

Run "/install solana-token-distribution" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is solana-token-distribution free?

Yes, solana-token-distribution is completely free (open-source). You can download, install and use it at no cost.

Which platforms does solana-token-distribution support?

solana-token-distribution is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created solana-token-distribution?

It is built and maintained by tilo-14 (@tilo-14); the current version is v1.0.1.

💬 Comments