Setup Stellar Contracts

Set up a Stellar/Soroban smart contract project with OpenZeppelin Contracts for Stellar. Use when users need to: (1) install Stellar CLI and Rust toolchain f...

This guide is coherent for setting up Soroban + OpenZeppelin, but follow these precautions before running the commands: (1) Review any remote install scripts (the curl | sh lines) by fetching them first (curl -fsSL <url> and inspect) rather than piping to sh blindly. (2) Prefer official package manager installers or pinned release artifacts where possible. (3) Pin exact crate versions in Cargo.toml as the guide recommends, and verify the OpenZeppelin repo and tags you reference. (4) Be aware of the AGPL-3.0 license for the provided code and the legal implications for your project. (5) Run installation/test steps in a controlled or isolated environment (container/VM) and avoid running install scripts as root. If you want, I can fetch the referenced install scripts and summarize what they do so you can decide whether to run them.

Type: OpenClaw Skill Name: setup-stellar-contracts Version: 1.0.1 The skill bundle instructs the OpenClaw agent to execute remote shell scripts via `curl | sh` to install the Rust toolchain (sh.rustup.rs) and the Stellar CLI (github.com/stellar/stellar-cli) in `SKILL.md`. While these are standard installation methods for the respective tools, they represent a high-risk execution pattern (Remote Code Execution) that could be exploited if the remote sources are compromised. Additionally, the `_meta.json` file contains a future-dated publication timestamp (2026), which is unusual for a current package.