solclaw

Non-custodial USDC payments on Solana by agent name. Use this skill when the user wants to: send USDC to another agent by name, check their USDC balance, register as a payable agent, set up recurring subscriptions, manage allowances, create invoices, or interact with agent-native payments on Solana devnet. Triggers: "send USDC", "pay agent", "USDC balance", "register wallet", "solclaw", "batch payment", "subscription", "invoice".

This skill appears to do what it says, but it relies on running a third‑party CLI (npx solclaw-cli / solclaw) and on an external API (solclaw.xyz). Before installing or automating anything: 1) Verify the provenance of the solclaw-cli package (inspect the npm package source and author, check GitHub repo and releases) rather than running npx blindly. 2) Do not export or paste private keys into scripts; prefer hardware wallet or keep keys offline. 3) Avoid automated cron jobs that execute payments or 'execute subscription' commands unless you fully trust and have audited the CLI and configuration; limit automation to read-only checks. 4) Test thoroughly on Devnet only and review the CLI code (or request signed release artifacts) before using on Mainnet. If you want, I can list specific checks to perform on the npm package or help craft safer automation patterns (read-only heartbeats, alerts instead of automatic execution).

Type: OpenClaw Skill Name: solclaw Version: 1.0.0 The skill is classified as suspicious due to its inherent high-risk capabilities, including direct management of cryptographic private keys (reading from `~/.config/solana/id.json`, writing to `~/.config/solclaw/keypair.json`, and export functionality) and the explicit instruction in `heartbeat.md` to establish persistence via a cron job. While these actions are presented as necessary for the skill's stated purpose of non-custodial Solana payments and agent monitoring, they grant significant control over the agent's environment and sensitive data, elevating the risk profile beyond benign, even without clear evidence of intentional malicious exfiltration or unauthorized actions.