← Back to Skills Marketplace
botmechanic

Nexwave Gateway

by botmechanic · GitHub ↗ · v1.0.2
cross-platform ⚠ suspicious
1312
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install nexwave-gateway
Description
Unified crosschain USDC balance via Circle Gateway + Circle Programmable Wallets. Deposit USDC on any supported chain, check your unified balance, and instantly mint USDC on any destination chain in <500ms — no bridging, no raw private keys.
Usage Guidance
This package implements exactly what it says: a testnet demo of Circle Gateway + Circle Programmable (MPC) wallets. However: 1) The skill requires sensitive Circle developer credentials (API key, entity secret, wallet set ID) — these grant the ability to create/sign transactions and should never be uploaded to untrusted systems or used with real/mainnet funds until you fully trust the code and author. 2) The registry metadata omitted the required env vars; that mismatch suggests sloppy packaging — review the SKILL.md and code before running. 3) Confirm the author (nexwave) and owner, and prefer running the setup and scripts in an isolated environment (container or VM) and on testnets first. 4) Inspect the included JS files yourself (they are present) and verify endpoints (Circle Gateway testnet URL, Circle SDK, Arc RPC) are correct. If you are not comfortable with handling API secrets or signing transactions via a third-party service, do not install or supply credentials.
Capability Analysis
Type: OpenClaw Skill Name: nexwave-gateway Version: 1.0.2 The OpenClaw skill `nexwave-gateway` is designed for cross-chain USDC transfers using Circle Gateway and Programmable Wallets. It requires `CIRCLE_API_KEY`, `CIRCLE_ENTITY_SECRET`, and `CIRCLE_WALLET_SET_ID` as environment variables, which are used to authenticate with legitimate Circle APIs (e.g., `gateway-api-testnet.circle.com`). The `setup.sh` script installs standard Node.js dependencies and copies local files, while the JavaScript files interact with Circle's MPC-secured wallets for transaction signing, ensuring raw private keys are not exposed. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in `SKILL.md` or `README.md` that would subvert the agent's intended purpose.
Capability Assessment
Purpose & Capability
The skill claims to provide unified USDC access via Circle Gateway and Circle Programmable Wallets and the code, SKILL.md, and README all implement that flow (Gateway API client, EIP-712 typed data, Circle MPC wallet SDK). Requesting CIRCLE_API_KEY, CIRCLE_ENTITY_SECRET, and CIRCLE_WALLET_SET_ID is expected for this purpose. However, the registry metadata at the top of the package lists "Required env vars: none" while the SKILL.md and code clearly require those env vars — an inconsistency in the manifest/metadata.
Instruction Scope
Runtime instructions are scoped to the Gateway use-case: run setup.sh, install Node deps, run check-balance.js / deposit.js / transfer.js. The SKILL.md and scripts only reference Circle credentials, Gateway API, and RPC endpoints needed for supported testnets. There are no instructions to read unrelated local files, the shell history, or arbitrary system configuration.
Install Mechanism
There is no remote download of arbitrary archives; setup.sh runs npm install for known packages (viem, dotenv, @circle-fin/developer-controlled-wallets) and copies the included JS files into a gateway-app directory. This is a typical local project setup. Risk is moderate because running setup.sh will write files and install Node packages — but the packages are standard and the script does not fetch code from unknown URLs.
Credentials
The skill requires developer-level Circle credentials (CIRCLE_API_KEY, CIRCLE_ENTITY_SECRET, CIRCLE_WALLET_SET_ID) which legitimately enable the described behavior but are highly sensitive: they allow creating wallets, signing transactions via Circle's API, and moving funds. The requirement is proportionate to the functionality, but because the author/source is unverified and the package metadata omitted these env vars, users should treat the credentials as high-risk and avoid using production/mainnet funds without full trust and review. setup.sh also creates a local .env template — ensure it is stored securely.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and won't be force-included. It copies files into a local gateway-app directory and creates a .env template when you run setup.sh — expected for a local demo app. There is no evidence it alters global agent settings or other skills' configurations.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install nexwave-gateway
  3. After installation, invoke the skill by name or use /nexwave-gateway
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
**Circle Programmable Wallets integration and safer agent usage** - Added integration with Circle Programmable Wallets (no raw private keys required). - Added dependency on the `circle-wallet` skill (`eltontay/circle-wallet`). - Updated environment variables: now requires `CIRCLE_API_KEY`, `CIRCLE_ENTITY_SECRET`, and `CIRCLE_WALLET_SET_ID`. - Introduced a new `circle-wallet-client.js` file for wallet interactions. - Documentation updated to reflect Circle MPC wallet use, removing the need for direct private keys and improving security for agent operations.
v1.0.1
nexwave-gateway 1.0.1 Changelog - No file or documentation changes detected in this version.
v1.0.0
nexwave-gateway 1.0.0 - Initial release providing unified crosschain USDC access via Circle Gateway. - Instantly deposit USDC on any supported testnet chain and mint on any other in under 500ms—no bridges, pools, or delays. - Includes tools to check balances, deposit, and transfer USDC across Ethereum Sepolia, Avalanche Fuji, and Base Sepolia. - Setup instructions, troubleshooting, and flow diagrams included for seamless OpenClaw Agent integration. - Support for early access fee rates and chain-specific guidance (testnet only).
Metadata
Slug nexwave-gateway
Version 1.0.2
License
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Nexwave Gateway?

Unified crosschain USDC balance via Circle Gateway + Circle Programmable Wallets. Deposit USDC on any supported chain, check your unified balance, and instantly mint USDC on any destination chain in <500ms — no bridging, no raw private keys. It is an AI Agent Skill for Claude Code / OpenClaw, with 1312 downloads so far.

How do I install Nexwave Gateway?

Run "/install nexwave-gateway" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Nexwave Gateway free?

Yes, Nexwave Gateway is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Nexwave Gateway support?

Nexwave Gateway is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Nexwave Gateway?

It is built and maintained by botmechanic (@botmechanic); the current version is v1.0.2.

💬 Comments