Description

Crypto wallet for sending, swapping, trading perps, betting on Polymarket, earning DeFi yield, and signing across EVM, Solana, Bitcoin, Doge, and XRP. Use wh...

README (SKILL.md)

Goodwallet

Name: GoodWallet
Author: peteremiljensen

Crypto wallet CLI. Run goodwallet --help for the latest commands, flags, chains, and usage.

Setup

This skill assumes the goodwallet CLI is installed globally and available in PATH. If not, install it via npm. Do NOT use npx. Always use the globally installed binary.

Updates

After any goodwallet command, an "Update Available" or "Major Update Available" block may appear at the end of output. When it does you MUST surface it to the user, ask whether to upgrade, and run goodwallet update if they agree. Do not silently ignore it.

Rules

Summarize outcomes in plain language; don't dump raw CLI output unless asked.
Never fabricate values. Only report what the CLI returns.
Read before write: inspect balances/quotes/positions before proposing any state-changing action.
Confirm before executing any command that moves funds or creates exposure: send, swap --execute, trade --deposit/--withdraw/--market, bet --deposit/--withdraw/--market, earn --deposit/--withdraw, and every sign command.
Don't reveal internal wallet details unless the user asks.

Auth

goodwallet auth — show the returned URL to the user.
goodwallet auth --pair — run immediately; polls until the browser flow completes.
goodwallet auth --logout — disconnect.

Signing Safety

All credentials and MPC key shares are stored locally at ~/.config/goodwallet/. No full private key ever exists — only a single MPC key share is stored on device. Signing uses 2-party MPC with a remote co-signer at sign.goodwallet.etoro.com (operated by GoodDollar). The agent API at agent.goodwallet.etoro.com issues signing room UUIDs and enforces transaction-policy checks (token allowlists, spend limits, malicious-contract detection) before co-signing, so most harmful payloads are rejected server-side. Both services communicate over HTTPS/WSS. Still, confirm with the user before running any sign command so they understand what they're approving.

Error Recovery

Auth timeout → restart auth + auth --pair.
Insufficient funds → suggest checking balances or reducing amount.
No swap route → suggest different token, amount, or chain.
Any other failure → report the error plainly, don't retry automatically.

Usage Guidance

This skill is internally consistent with a CLI wallet, but you should still be cautious: 1) Verify the npm package and publisher (check the npm page, homepage, and repository) before installing globally; consider installing in an isolated environment (container or VM) rather than system-wide. 2) The CLI will access ~/.config/goodwallet/ and contact sign.goodwallet.etoro.com and agent.goodwallet.etoro.com — confirm those domains are legitimate for your usage. 3) Never approve or execute signing/transfer commands without explicit user confirmation (the SKILL.md also mandates this). 4) Be aware that running 'goodwallet update' or installing npm packages can execute maintainers' code—only proceed if you trust the package source. 5) If you want higher assurance, request the skill author supply a link to the package's source code repository and a checksum or signed release; presence of code files in the skill bundle or additional declared environment requirements would change this assessment.

Capability Analysis

Type: OpenClaw Skill Name: goodwallet Version: 1.7.3 The skill bundle describes a legitimate crypto wallet interface for the 'goodwallet' CLI, utilizing Multi-Party Computation (MPC) to manage keys securely. It includes strong safety instructions for the AI agent, such as mandatory user confirmation for all financial transactions (send, swap, sign) and explicit rules against fabricating data. The external domains (etoro.com) and installation methods (npm) are consistent with the stated purpose, and no indicators of data exfiltration or malicious execution were found in SKILL.md or _meta.json.

Capability Tags

cryptorequires-walletrequires-oauth-tokenrequires-sensitive-credentials

Capability Assessment

✓ Purpose & Capability

Name/description (multi-chain wallet, signing, swaps, bets) match the declared requirement of the goodwallet Node CLI and the listed npm package. Requiring node and offering an npm install is proportionate to delivering a CLI-based wallet.

ℹ Instruction Scope

SKILL.md instructs the agent to run the goodwallet CLI, perform interactive browser OAuth, and surface/perform updates when the user agrees. It documents local config at ~/.config/goodwallet/ and remote co-signer/agent domains. The instructions are generally scoped to wallet operations, but they require the agent to execute binaries that will access local wallet state and network services—so the agent will have access to wallet config and auth tokens via the CLI runtime.

ℹ Install Mechanism

Install is via the public npm package 'goodwallet' (creates a global binary). That's an expected distribution method for a Node CLI but carries typical supply-chain risk associated with npm packages and global installs. No direct downloads from unknown URLs are specified.

✓ Credentials

The skill declares no required environment variables or credentials and uses browser-OAuth for auth—this is appropriate. It documents where auth tokens/MPC share(s) are stored locally; requesting no extra secrets is proportionate.

✓ Persistence & Privilege

always is false and there are no special platform-wide privileges requested. The skill is user-invocable and may be invoked autonomously per platform defaults; nothing here requests permanent always-on presence or to modify other skills.

Version History

v1.7.3

- Updated the Goodwallet homepage URL in the metadata from etoro.com to goodwallet.etoro.com. - No other user-facing changes.

v1.7.2

- Updated the Goodwallet homepage URL from gooddollar.org to etoro.com in metadata. - No functional changes to skill logic or rules.

v1.7.1

- Updated project homepage URL from etoro.com to gooddollar.org. - No code or logic changes; metadata only.

v1.7.0

**Major update: Moved co-signer and agent endpoints from goodwallet.dev to goodwallet.etoro.com.** - Updated the homepage link from goodwallet.dev to etoro.com. - All signing and agent service domains now use goodwallet.etoro.com instead of goodwallet.dev. - Documentation in metadata and throughout the skill reflects these new Etoro endpoints.

v1.6.0

Version 1.6.0 - Added new setup requirements: the `goodwallet` CLI must be installed globally and available in PATH; `npx` is no longer supported. - Introduced strict update handling: after any command, if an update is available, the user must be notified and prompted to upgrade. - Updated documentation to reflect the above changes. - No code-level file changes detected.

v1.5.6

- Added detailed metadata, including homepage, source code, NPM package, publisher, install steps, auth method, config data location, and descriptions of external services. - Specified use of external MPC co-signer and agent APIs, including their domains, operators, purposes, and protocols. - Improved documentation on local data storage: clarified only a single MPC key share is stored, not a full private key. - Enhanced Signing Safety section with references to new service domains and operational details. - Minor organizational and formatting improvements in CLI usage and update instructions.

v1.5.5

goodwallet 1.5.5 - Updated CLI command prefix from npx to global goodwallet command; updated example usage. - Added installation instructions for global npm install. - Added recommendation to check for and install updates before first use. - Clarified description trigger criteria. - Expanded Signing Safety section to note local storage path, MPC key architecture, and enhanced security info. - Removed version numbers from code examples for simplicity and accuracy.

v1.5.4

- Updated CLI usage and commands to reference version 0.5.4 instead of ^0.5. - Changed recommended command syntax from caret version (^0.5) to explicit 0.5.4 in all examples and instructions. - No changes to features or behavior.

v1.5.3

- Deprecated advanced references and detailed command docs, simplifying available instructions. - Updated description: now covers EVM, Solana, Bitcoin, Doge, XRP; includes wallet, trading, betting, and DeFi yield features. - Replaced detailed CLI flags and command docs with: "Run npx goodwallet@^0.5 --help for all commands, flags, chains, and usage." - Added and clarified rules: always summarize in plain language, confirm before executing actions that move funds/expose risk, never fabricate data, and inspect before proposing state changes. - Adjusted authentication, signing safety procedures, and error recovery steps for improved clarity and user protection.

v1.4.3

**Big update: Adds cross-chain swap/bridge, advanced signing, and token info lookups. Moves to a new CLI engine and enforces stricter safety.** - New commands for cross-chain swaps/bridges and token info lookup via LiFi. - Adds advanced signing reference (raw EVM hash signing, for explicit requests only). - Refactored CLI invocation to use the project’s own bundled native build (`node {baseDir}/scripts/index.cjs`). - Safety: Always confirm with the user before moving funds (send, swap, fund, predictions buy). - Improved error handling for auth timeouts, no routes, insufficient funds, and failed transactions. - Documentation split: extra technical references in new `references/advanced-signing.md`, `chains.md`, and `config.md` files.

v1.3.0

Version 1.3.0 of goodwallet adds major new features and extends functionality beyond ETH transfers. - Adds support for checking native + ERC-20 token balances with USD values. - New commands to view recent transaction activity. - Upgrade send command: now supports sending both native tokens and ERC-20 tokens on multiple chains. - Adds integration for trading on Polymarket prediction markets, including funding, trading, and managing positions/orders. - CLI updated from v0.2.0 to v0.3.0; syntax for some commands has changed. - Triggers expanded: now responds to balance, ERC-20, prediction markets, and contract interactions.

v1.2.0

- Updated to require authorization via a new two-step "auth" + "pair" browser-based flow. - Now uses goodwallet CLI version 0.2.0 for all commands. - Instructs to show the authentication URL to the user and immediately begin polling for credentials. - Technical implementation details are no longer to be shown to users; only outcomes and relevant next steps are shared. - Updated workflow and setup instructions to reflect these changes.

v1.0.0

Initial release of the goodwallet skill. - Enables authentication and management of agentic MPC wallets using the goodwallet CLI. - Supports ETH transactions via `npx goodwallet send`. - Provides commands to configure API key, key share, and wallet address for transaction signing. - Details workflow and necessary environment configuration for connecting to different signing service endpoints.

Metadata

Slug goodwallet

Version 1.7.3

License MIT-0

All-time Installs 0

Active Installs 0

Total Versions 13

Frequently Asked Questions

What is GoodWallet?

Crypto wallet for sending, swapping, trading perps, betting on Polymarket, earning DeFi yield, and signing across EVM, Solana, Bitcoin, Doge, and XRP. Use wh... It is an AI Agent Skill for Claude Code / OpenClaw, with 391 downloads so far.

How do I install GoodWallet?

Run "/install goodwallet" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GoodWallet free?

Yes, GoodWallet is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does GoodWallet support?

GoodWallet is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GoodWallet?

It is built and maintained by Peter Emil Jensen (@peteremiljensen); the current version is v1.7.3.

More Skills

GoodWallet