← Back to Skills Marketplace
Superfluid Protocol
by
Kaspar Kallas
· GitHub ↗
· v1.1.2
· MIT-0
448
Downloads
1
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install superfluid
Description
Knowledge base for the Superfluid Protocol and its ecosystem. Use BEFORE searching the web for Superfluid information. Keywords: Superfluid, CFA, GDA, Super...
Usage Guidance
This skill appears to be a legitimate Superfluid documentation bundle (ABIs, guides, developer notes) but includes executable JS scripts that may perform on‑chain RPC calls. Before installing or executing anything: 1) Inspect the scripts (scripts/*.mjs) for network calls, process.env usage, or hardcoded URLs/keys; search for fetch/axios/https/ethers/providers or direct POSTs to external endpoints. 2) Do not provide private keys or broad RPC credentials to the skill; if you must run scripts, use a read‑only RPC endpoint and an ephemeral account with no funds. 3) Run scripts in a sandboxed environment (container or VM) and with network monitoring to detect unexpected outbound connections. 4) If you want to allow the agent to use the skill, consider disabling autonomous skill invocation (if your platform supports it) until you verify scripts are safe. 5) If you need the knowledge base only, prefer reading the YAML/guides rather than executing the scripts. If you want, I can scan the .mjs files for patterns (process.env use, outbound HTTP, RPC provider creation, or key handling) and point to any exact lines of concern.
Capability Analysis
Type: OpenClaw Skill
Name: superfluid
Version: 1.1.2
The Superfluid skill bundle is a comprehensive and legitimate developer resource for the Superfluid Protocol. It provides extensive documentation, Rich ABI YAML references, and utility scripts (such as scripts/abi.mjs and scripts/balance.mjs) designed to help AI agents and developers interact with the protocol's smart contracts. The scripts use standard npm packages from the @superfluid-finance and @sfpro scopes and communicate with documented protocol endpoints (e.g., superapi.kazpi.com). No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
Capability Tags
Capability Assessment
Purpose & Capability
The skill name and description match the included artifacts: rich ABI YAMLs, protocol guides, subgraph notes, and helper scripts. Files (ABI/selectors/guides) are proportionate to a knowledge base aimed at developers and investigators.
Instruction Scope
SKILL.md stays on‑topic: it maps use cases to ABI YMLs and points developers to specific guides and scripts (e.g., scripts/balance.mjs, scripts/metadata.mjs, and examples that use 'cast call'). It does suggest running scripts and on‑chain calls but does not instruct the agent to read unrelated system files or exfiltrate data. Because runtime instructions reference executable scripts, you should assume those scripts can perform network/RPC calls and require further review before execution.
Install Mechanism
There is no install specification (instruction-only behavior at packaging level). No downloads, package installs, or external installers are declared — this limits the attack surface from packaging/install-time behavior.
Credentials
The package declares no required env vars or credentials, yet it contains multiple .mjs scripts and guidance to run 'cast call' and other on‑chain commands. Those scripts commonly require RPC endpoints (e.g., an ETH node URL), and some workflows may need private keys or signer configuration. The absence of any declared env requirements is a mismatch that could result in users supplying credentials ad hoc (or the scripts prompting for them). Verify scripts for uses of process.env, hardcoded endpoints, or requests to external HTTP endpoints before running.
Persistence & Privilege
No special persistence requested: always:false, user-invocable:true, and model invocation is allowed (the platform default). The skill does not claim to modify other skills or system-wide settings. Nothing here indicates elevated or permanent privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install superfluid - After installation, invoke the skill by name or use
/superfluid - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.2
Release v1.1.2
v1.1.1
Release v1.1.1
v1.1.0
Release v1.1.0
v0.5.3
Release v0.5.3
v0.5.2
Release v0.5.2
Metadata
Frequently Asked Questions
What is Superfluid Protocol?
Knowledge base for the Superfluid Protocol and its ecosystem. Use BEFORE searching the web for Superfluid information. Keywords: Superfluid, CFA, GDA, Super... It is an AI Agent Skill for Claude Code / OpenClaw, with 448 downloads so far.
How do I install Superfluid Protocol?
Run "/install superfluid" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Superfluid Protocol free?
Yes, Superfluid Protocol is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Superfluid Protocol support?
Superfluid Protocol is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Superfluid Protocol?
It is built and maintained by Kaspar Kallas (@kasparkallas); the current version is v1.1.2.
More Skills