← Back to Skills Marketplace
webcraft3r

ConsortiumAI Create Account

cross-platform ⚠ suspicious
918
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install consortiumai-create-account
Description
Create a custodial wallet account on Consortium AI.
README (SKILL.md)

Instructions

This skill provides account creation functionality for Consortium AI.

It calls an external API that creates a custodial wallet account on Consortium AI.

How to run (implementation)

From the skill directory, you can call the API either by making HTTP requests (see API Reference) or by running the bundled script:

  • Create Account: node scripts/create-account.js \x3CWALLET_ADDRESS> or npm run create-account -- \x3CWALLET_ADDRESS> Example: node scripts/create-account.js 5h4...3k1

The script requires TRADING_ANALYSIS_API_KEY to be set. It prints the API response as JSON to stdout on success, or error JSON to stderr and exits non-zero on failure.


Setup

Set the API key as an environment variable before using this skill:

export TRADING_ANALYSIS_API_KEY=your-secret-api-key

To get an API key, contact Consortium AI on X.


API Reference

Backend API base URL: https://api.consortiumai.org

Endpoint: POST https://api.consortiumai.org/api/custodial-wallet/create-with-api-key Creates a new custodial wallet account.

Authentication

API key only (no JWT). Send the key in one of:

  • Header: x-api-key: \x3CTRADING_ANALYSIS_API_KEY>
  • Header: Authorization: Bearer \x3CTRADING_ANALYSIS_API_KEY>

Request Body

{
  "walletAddress": "5h4...YourWalletAddress...3k1"
}

Success response (201 Created)

{
  "message": "Custodial wallet created successfully",
  "data": {
    "id": "wallet_uuid",
    "wallet_address": "GeneratedCustodialWalletAddress",
    "user_id": "user_uuid",
    "created_at": "2024-03-20T10:00:00.000Z",
    "updated_at": "2024-03-20T10:00:00.000Z"
  }
}

Error responses

Status When Body (example)
400 Missing walletAddress { "error": "Missing walletAddress" }
401 Missing or wrong API key { "success": false, "message": "Invalid or missing API key" }
404 User not found for wallet address { "error": "User not found for the provided wallet address" }

Available Functions

createCustodialWallet(walletAddress)

Purpose Create a new custodial wallet account on Consortium AI.

Parameters

  • walletAddress (string): The user's wallet address.

Expected Behavior

  • Sends a POST request to https://api.consortiumai.org/api/custodial-wallet/create-with-api-key
  • Authenticates with x-api-key using TRADING_ANALYSIS_API_KEY
  • Returns the created wallet details.

Returns

  • Wallet ID
  • Generated Custodial Wallet Address
  • User ID
  • Creation timestamp
Usage Guidance
This skill appears to implement what it claims (it posts a walletAddress to https://api.consortiumai.org using an API key). Before installing or using it: (1) verify the API key provenance — only set a key you obtained directly from Consortium AI and do not reuse high-privilege keys from other services; (2) confirm the correct environment variable name with the skill publisher (metadata omitted the required env var and the provided name TRADING_ANALYSIS_API_KEY looks mismatched), (3) verify the Consortium AI domain and contact info (the SKILL.md points to an X account) to ensure the service is legitimate, (4) review the small script yourself or run it in an isolated environment since it will transmit the wallet address and API key to a remote endpoint, and (5) if you rely on this for production funds or sensitive accounts, request stronger assurances (publisher identity, TLS certs, official docs) before use.
Capability Analysis
Type: OpenClaw Skill Name: consortiumai-create-account Version: 1.0.0 The skill is classified as suspicious due to a potential shell injection vulnerability. The `SKILL.md` file instructs the AI agent to execute `node scripts/create-account.js <WALLET_ADDRESS>`. If the AI agent does not properly sanitize the `WALLET_ADDRESS` argument before passing it to the shell, it could lead to arbitrary command execution. While the `scripts/create-account.js` file itself uses the `walletAddress` safely within a JSON payload, the vulnerability lies in the command's invocation by the agent. No other malicious behaviors like unauthorized data exfiltration or persistence were identified.
Capability Assessment
Purpose & Capability
The skill's name, description, SKILL.md, and the bundled script all align: they call https://api.consortiumai.org to create a custodial wallet using an API key. However, the registry metadata lists no required environment variables while SKILL.md and the script require TRADING_ANALYSIS_API_KEY — an inconsistency that should be resolved. Also the env var name (TRADING_ANALYSIS_API_KEY) is oddly named for a custodial-wallet API key, which could indicate mislabeling or reuse of a key intended for a different product.
Instruction Scope
The runtime instructions and bundled script are scoped narrowly: they only require an API key and a wallet address, then POST that address to the documented API endpoint. The instructions do not ask the agent to read other files, system paths, or unrelated environment variables.
Install Mechanism
This is an instruction-only skill with a small included script and no install spec. Nothing is downloaded or installed at runtime beyond running the provided Node script. That minimizes install-time risk.
Credentials
The skill requires a single API key (TRADING_ANALYSIS_API_KEY) which is reasonable for the described API, but: (1) the registry metadata omitted this required env var, (2) the key name is unexpected for a custodial-wallet API and could lead users to mistakenly supply the wrong credential, and (3) creating custodial wallets is a sensitive operation — using a high-privilege or shared API key here would be risky. The skill does not request additional unrelated credentials, which is good.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system configuration, and does not install persistent agents. It runs only when invoked, so persistence/privilege concerns are low.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install consortiumai-create-account
  3. After installation, invoke the skill by name or use /consortiumai-create-account
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of Consortium AI Create Account skill. - Enables creation of custodial wallet accounts via Consortium AI API. - Requires and uses a TRADING_ANALYSIS_API_KEY for authentication. - Includes a Node.js script for easy account creation from the command line. - Detailed API reference and setup instructions provided in SKILL.md.
Metadata
Slug consortiumai-create-account
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is ConsortiumAI Create Account?

Create a custodial wallet account on Consortium AI. It is an AI Agent Skill for Claude Code / OpenClaw, with 918 downloads so far.

How do I install ConsortiumAI Create Account?

Run "/install consortiumai-create-account" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ConsortiumAI Create Account free?

Yes, ConsortiumAI Create Account is completely free (open-source). You can download, install and use it at no cost.

Which platforms does ConsortiumAI Create Account support?

ConsortiumAI Create Account is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ConsortiumAI Create Account?

It is built and maintained by Web Crafter 🕸️ (@webcraft3r); the current version is v1.0.0.

💬 Comments