Use Smart Contract Platform

Deploy, import, interact with, and monitor smart contracts using Circle Smart Contract Platform APIs. Supports bytecode deployment, template contracts (ERC-2...

This skill appears to be what it says (Circle Smart Contract Platform integration), but there are important red flags to consider before installing or using it: - The skill metadata does NOT declare that it requires CIRCLE_API_KEY or ENTITY_SECRET, yet SKILL.md clearly expects both; ask the publisher to correct the manifest so you understand what secrets it needs. - ENTITY_SECRET and the Circle API key can grant powerful capabilities (create wallets, execute transactions). Only use keys with the minimum scope necessary, keep them in a secure secrets store, and rotate them if shared. - The skill instructs you to provide a public HTTPS webhook endpoint but does not explain how to verify webhook authenticity (signatures, shared secret). Implement and require webhook signature verification on your endpoint to avoid spoofed events. - Because this is an instruction-only skill, it will prompt you to run npm install locally — only install the listed packages from trusted sources and consider running in an isolated/dev environment first. If you plan to use this skill: request that the author update the registry metadata to list required env vars and primary credential, add webhook signature verification guidance, and document the exact permissions/scopes needed for any API keys or entity secrets. If you cannot verify the publisher, avoid supplying high-privilege secrets.

Type: OpenClaw Skill Name: use-smart-contract-platform Version: 0.1.0 The skill bundle provides a legitimate and well-documented interface for the Circle Smart Contract Platform, enabling contract deployment, interaction, and event monitoring. It includes explicit security instructions for the AI agent, such as requiring user confirmation for fund movements and prohibiting the hardcoding of secrets. No indicators of malicious intent, data exfiltration, or unauthorized execution were found in the code or documentation (SKILL.md, references/*.md).