← Back to Skills Marketplace
moltycash
by
0xsnackbaker
· GitHub ↗
· v2.0.0
942
Downloads
0
Stars
2
Active Installs
3
Versions
Install in OpenClaw
/install moltycash
Description
Send USDC to molty users via A2A protocol. Use when the user wants to send cryptocurrency payments, tip someone, or pay a molty username.
Usage Guidance
This skill will ask you to provide raw wallet private keys and to run a package from npm (npx moltycash). Before using it: 1) Confirm the npm package source and inspect the package code (don't blindly run npx). 2) Verify the molty.cash and x402 projects independently and confirm the expected npm package name and publisher. 3) Prefer hardware wallets, signing services, or ephemeral transaction signing rather than storing long-term private keys in plain files/env vars; if you must, secure ~/.openclaw/.env (chmod 600) and consider disk/encrypted key storage. 4) Note the registry metadata did not list these env vars or required binaries—ask the skill author or view the package repository to resolve that discrepancy. 5) Test in an isolated environment with small amounts first. If you are unsure about inspecting npm packages or handling private keys safely, do not install or run the skill.
Capability Analysis
Type: OpenClaw Skill
Name: moltycash
Version: 2.0.0
The skill bundle is benign. It describes a cryptocurrency payment skill that requires access to private keys (`EVM_PRIVATE_KEY`, `SVM_PRIVATE_KEY`) and an optional identity token (`MOLTY_IDENTITY_TOKEN`). While handling private keys is inherently high-risk, this is explicitly declared as necessary for the skill's stated purpose. The `SKILL.md` file provides clear instructions for setup and usage, including security best practices for storing credentials, and contains no evidence of prompt injection, malicious commands, data exfiltration, or obfuscation within the provided files. The skill relies on an external `npx moltycash` command, but the content of that external package is not part of this analysis.
Capability Assessment
Purpose & Capability
The skill's stated purpose (sending USDC via molty.cash) legitimately requires wallet private keys and a client binary. However, the registry metadata lists no required environment variables and no required binaries, while SKILL.md explicitly requires EVM_PRIVATE_KEY or SVM_PRIVATE_KEY and expects npm/npx to run an npm package. This mismatch between declared requirements and runtime instructions is incoherent.
Instruction Scope
The SKILL.md instructions are focused on sending payments and only ask for wallet private keys and an optional identity token. They instruct storing credentials at ~/.openclaw/.env and using npx/npm to run the moltycash package. The actions described are directly related to the payment task, but they grant the skill access to raw private keys and suggest running code fetched from npm—both high-sensitivity operations that should be verified.
Install Mechanism
There is no install spec in the registry, but the docs instruct using npx or npm install -g, which will fetch code from the npm registry at runtime. The absence of an explicit install provenance or pinned package source in the skill metadata combined with a run-via-npx workflow increases risk (you'd be executing remote package code on demand).
Credentials
The only secrets requested (EVM_PRIVATE_KEY, SVM_PRIVATE_KEY, optional MOLTY_IDENTITY_TOKEN) are proportionate to a crypto-payments tool. However, the registry metadata failing to declare these env vars is inconsistent. Storing private keys in plaintext environment files is also risky; the skill's suggestion to place them in ~/.openclaw/.env is reasonable for convenience but requires careful operational security (use file permissions, hardware or encrypted key storage where possible).
Persistence & Privilege
The skill is not forced-always and is user-invocable. It does not request elevated platform privileges and instructs placing credentials in its own OpenClaw config path (~/.openclaw/.env). There is no indication it modifies other skills or requires persistent platform-wide changes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moltycash - After installation, invoke the skill by name or use
/moltycash - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
Major update with simplified CLI usage and documentation.
- Adds direct CLI usage with `npx moltycash send <molty_name> <amount> [--network]`
- Simplifies payment formats and instructions for Base and Solana networks
- Updates protocol reference to A2A and streamlines verified sender setup
- Removes API and code example sections, focusing on command-line workflow
- Clarifies required environment variables and their usage
- Updates security best practices and resource links
v1.0.1
- Updated default payment examples to use the username "moltycash" instead of "IloveFenerbahce"
- No functional or breaking changes; documentation and example alignment only
- Bumped version to 1.0.1 for consistency
v1.0.0
Initial release of moltycash.
- Send USDC payments to molty usernames using the x402 protocol.
- Supports both Base (EVM) and Solana (SVM) networks.
- Provides REST API endpoint and TypeScript examples for both axios and fetch.
- All transaction fees are paid by sender; recipient receives full amount.
- Optional support for verified sender identity via JWT token.
- Requires EVM_PRIVATE_KEY or SVM_PRIVATE_KEY environment variable for wallet access.
- Includes integration and security best practices for OpenClaw environments.
Metadata
Frequently Asked Questions
What is moltycash?
Send USDC to molty users via A2A protocol. Use when the user wants to send cryptocurrency payments, tip someone, or pay a molty username. It is an AI Agent Skill for Claude Code / OpenClaw, with 942 downloads so far.
How do I install moltycash?
Run "/install moltycash" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is moltycash free?
Yes, moltycash is completely free (open-source). You can download, install and use it at no cost.
Which platforms does moltycash support?
moltycash is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created moltycash?
It is built and maintained by 0xsnackbaker (@0xsnackbaker); the current version is v2.0.0.
More Skills