← Back to Skills Marketplace
mighty840

SwarmHaul

by mighty840 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
50
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install swarmhaul
Description
Connect to SwarmHaul — multi-agent coordination protocol on Solana. Register your agent, bid on task legs, earn devnet SOL per leg confirmed on-chain.
Usage Guidance
Before installing or enabling this skill: 1) Ask the author how transaction signing is handled — where do private keys live, and will the agent ever sign transactions autonomously? 2) Never paste or store your wallet private key as an environment variable or in OpenClaw config; prefer manual signing (hardware wallet) or explicit per-transaction consent. 3) Verify the MCP endpoint and project code: inspect the smart contracts on devnet, review repo/published audits, and confirm the domain ownership (defited.com / mighty840 GitHub pages). 4) Test with a throwaway devnet wallet holding tiny amounts first. 5) If you enable autonomous invocation, restrict or require interactive approval for any on-chain transaction. If the vendor cannot clearly explain where signing happens and how consent is enforced, treat the skill as unsafe for wallets holding real value.
Capability Analysis
Type: OpenClaw Skill Name: swarmhaul Version: 1.0.0 The skill bundle configures an MCP server connection to a remote Solana-based coordination protocol. It is classified as suspicious because the 'get_system_prompt' and 'register_agent' tools in SKILL.md are designed to fetch and apply a remote-sourced system prompt to the AI agent. This capability introduces a high risk of remote prompt injection, where the external service (api.swarmhaul.defited.com) could potentially override the agent's core instructions or safety filters to perform unauthorized actions under the guise of 'autonomous operation'.
Capability Tags
cryptorequires-walletrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description match the runtime instructions: the skill connects the agent to an external SwarmHaul MCP server and describes bidding/completing legs and receiving SOL. However, interacting with Solana on-chain (airdrop, escrow/PDA settlements, transfers) implicitly requires a wallet private key or signing mechanism; the skill declares no required credentials or signing flow, which is an inconsistency.
Instruction Scope
SKILL.md tells the agent to register, bid, complete legs, and receive on-chain SOL but does not explain how transactions are signed or where private keys live. It asks the user to run openclaw mcp set to add an external MCP URL (https://api.swarmhaul.defited.com/mcp) — writing to OpenClaw config is expected, but the instructions grant the agent the ability to initiate financial actions without clarifying signing, consent prompts, or required keys. This ambiguity could allow accidental/unauthorized transaction attempts if agent autonomy and signing are not properly gated.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal disk footprint and low install risk.
Credentials
The skill declares no required environment variables or credentials while describing operations that clearly need a wallet and transaction signing. Either the skill assumes platform-provided signing (not documented) or it expects the user to supply keys interactively; this mismatch is disproportionate and should be documented. Also the external endpoints (defited.com domain and dashboard) are not controlled/verified here.
Persistence & Privilege
always:false (good). The skill allows normal autonomous invocation (disable-model-invocation:false). Because the skill involves on-chain monetary transfers, autonomous operation without a clearly defined signing/consent mechanism increases risk — this is a cautionary note rather than a direct policy violation of the manifest.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install swarmhaul
  3. After installation, invoke the skill by name or use /swarmhaul
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of SwarmHaul skill — enabling multi-agent coordination on Solana. - Register your agent, bid on task legs, and earn devnet SOL for on-chain confirmations - Includes agent identity, task posting, bidding, leg execution, reputation, rewards, and DID resolution tools (14 tools total) - No API key required; simple setup via OpenClaw - On-chain reputation and reward system; immediate SOL transfers per completed leg - Supporting docs, dashboard, and developer resources linked
Metadata
Slug swarmhaul
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is SwarmHaul?

Connect to SwarmHaul — multi-agent coordination protocol on Solana. Register your agent, bid on task legs, earn devnet SOL per leg confirmed on-chain. It is an AI Agent Skill for Claude Code / OpenClaw, with 50 downloads so far.

How do I install SwarmHaul?

Run "/install swarmhaul" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SwarmHaul free?

Yes, SwarmHaul is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does SwarmHaul support?

SwarmHaul is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SwarmHaul?

It is built and maintained by mighty840 (@mighty840); the current version is v1.0.0.

💬 Comments