← Back to Skills Marketplace
950
Downloads
2
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install cavos-cli-skill
Description
Interact with the Cavos CLI for Starknet wallet operations. Use for transfers, approvals, contract calls, session management, and transaction monitoring.
README (SKILL.md)
Cavos CLI Skill
This skill allows you to interact with the Cavos CLI (@cavos/cli) to manage Starknet wallets, perform transfers, and execute contract calls.
Core Commands
Always use the --json flag when possible to get structured output.
1. Identity & Session
- Who Am I: Check current session and wallet address.
npx @cavos/cli whoami --json - Session Status: Check if the session is active/expired.
npx @cavos/cli session-status --json - Import Session: Import a session token provisioned from the Dashboard.
npx @cavos/cli session import \x3Ctoken>
2. Assets & Transfers
- Check Balance:
npx @cavos/cli balance --token \x3CSTRK|ETH|address> --json - Transfer Tokens:
npx @cavos/cli transfer --to \x3Caddress> --amount \x3Camount> --token \x3Ctoken> --json
3. Contract Interactions
- Approve Spending:
npx @cavos/cli approve --spender \x3Caddress> --amount \x3Camount> --token \x3Ctoken> --json - Execute Call:
npx @cavos/cli execute --contract \x3Caddress> --entrypoint \x3Cmethod> --calldata \x3Ccomma_separated_vals> --json - Read Call:
npx @cavos/cli call --contract \x3Caddress> --entrypoint \x3Cmethod> --calldata \x3Cvals> --json
4. Advanced Operations
- Multicall: Batch multiple calls.
npx @cavos/cli multicall --calls '\x3Cjson_array>' --json - Simulate/Estimate: Check tx before sending.
npx @cavos/cli simulate --contract \x3Caddr> --entrypoint \x3Cmethod> --calldata \x3Cvals> --json - Transaction Status:
npx @cavos/cli tx status \x3Chash> --json
Best Practices
- Verify Balance: Always run
balancebefore atransfer. - Check Session: Run
whoamiorsession-statusat the start of a workflow to ensure authentication. - Use JSON: Parsing JSON output is safer than regexing stdout.
- Calldata: Calldata for
executeandcallshould be comma-separated strings (e.g.,0x1,100).
Usage Guidance
This skill is coherent for controlling a Cavos/Starknet wallet via the @cavos/cli, but note: npx will download and execute the @cavos/cli package from npm at runtime — verify the package name, publisher, and version before running. Do not paste session tokens, private keys, or other secrets into chat; supply them only to the CLI in a secure context. Before sending transfers/approvals, double-check addresses and amounts and consider running simulate/estimate first. If you prefer more control, install @cavos/cli locally from a verified source and run it directly rather than via npx.
Capability Analysis
Type: OpenClaw Skill
Name: cavos-cli-skill
Version: 0.1.0
The skill is classified as suspicious due to its inherent high-risk capabilities, specifically enabling direct interaction with a Starknet wallet for financial transactions (transfers, approvals) and arbitrary contract calls via the `npx @cavos/cli` command in `SKILL.md`. While these operations align with the stated purpose, they carry significant risk of financial loss if the AI agent is compromised or prompted maliciously. Additionally, the reliance on `npx` to download and execute an external package (`@cavos/cli`) introduces a supply chain vulnerability, as the integrity of this external dependency is critical. There is no evidence of intentional malicious prompt injection within `SKILL.md` or other files, nor any attempts at data exfiltration or persistence from the skill bundle itself.
Capability Assessment
Purpose & Capability
Name/description (Cavos CLI for Starknet wallet ops) matches the required binary (npx) and the SKILL.md commands (npx @cavos/cli). There are no unexpected credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md only instructs running specific cavos CLI commands (whoami, balance, transfer, execute, etc.) and to use --json. It does not instruct reading unrelated files or environment variables. It does mention importing a session token provided from the Dashboard (expected for auth).
Install Mechanism
No install spec (instruction-only), which is low-risk. However, the runtime commands use npx to fetch and execute @cavos/cli from the npm registry on demand — that implicitly downloads and runs remote code. This is expected for an npx-based CLI but is a material runtime action the user should be aware of.
Credentials
The skill declares no required env vars or credentials. That aligns with the instructions, which expect an explicit session token to be provided when running session import. There is no hidden request for unrelated secrets or external credentials.
Persistence & Privilege
always is false and the skill has no install step that modifies system or agent-wide settings. It does not request persistent privileges or modify other skills' configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install cavos-cli-skill - After installation, invoke the skill by name or use
/cavos-cli-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of cavos-cli-skill.
- Provides commands to interact with the Cavos CLI for Starknet wallet management, asset transfers, approvals, and contract operations.
- Supports session import and status checks.
- Includes guidance for using structured JSON output.
- Details best practices and usage examples for common CLI operations.
Metadata
Frequently Asked Questions
What is Cavos Cli?
Interact with the Cavos CLI for Starknet wallet operations. Use for transfers, approvals, contract calls, session management, and transaction monitoring. It is an AI Agent Skill for Claude Code / OpenClaw, with 950 downloads so far.
How do I install Cavos Cli?
Run "/install cavos-cli-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Cavos Cli free?
Yes, Cavos Cli is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Cavos Cli support?
Cavos Cli is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Cavos Cli?
It is built and maintained by adrianvrj (@adrianvrj); the current version is v0.1.0.
More Skills