← Back to Skills Marketplace
355
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install soma
Description
Expert guide for participating in the SOMA network — a decentralized system that trains a foundation model through competition. Provides data submission work...
Usage Guidance
This skill appears to be a comprehensive SOMA contributor guide and does require signing keys, HuggingFace access, and S3 credentials to operate — that is expected for the described workflows. However: 1) the registry metadata does not list these env vars even though the SKILL.md requires them; ask the publisher to fix the manifest so you know exactly what will be needed. 2) Do NOT use mainnet/private production keys for testing — follow the skill's suggestion to use testnet keys and explicitly confirm which network a given key targets. 3) Be cautious about exporting wallet secret keys and pushing .env contents to any cloud provider: prefer using short-lived, least-privilege credentials scoped to a single S3 bucket, and rotate keys after testing. 4) Understand that submission data and even encrypted weights may be published with public-read ACLs per protocol — do not submit proprietary or regulated data. 5) If you plan to run any recommended scripts (federated submitter, commit/reveal), review the quickstart repo code (the docs reference GitHub) before running, and ensure Modal or any orchestration service you use is trusted and configured securely. If the author cannot explain why the registry metadata omits required env vars or refuses to update it, treat the omission as a red flag and do not provide secrets.
Capability Analysis
Type: OpenClaw Skill
Name: soma
Version: 1.1.0
The skill bundle facilitates participation in the 'SOMA' decentralized AI network, requiring the agent to install a CLI via a high-risk 'curl | bash' command (sup.soma.org) and manage several sensitive credentials including signing keys, HuggingFace tokens, and S3 access keys. While the documentation includes security best practices like using testnet keys and scoped permissions, the reliance on an unverified external installer combined with the collection of high-value secrets presents a significant risk of credential harvesting or supply chain compromise.
Capability Assessment
Purpose & Capability
The SKILL.md and references explicitly describe on-chain signing, S3 uploads, and HuggingFace dataset access — so requesting SOMA_SECRET_KEY, HF_TOKEN, and S3 credentials is coherent with the skill's stated purpose. However, the skill registry metadata lists no required environment variables or binaries even though the runtime docs require the soma CLI and several env vars; that metadata/manifest mismatch is an inconsistency that should be corrected.
Instruction Scope
The instructions stay within SOMA-specific workflows (data submission, scoring, commit-reveal, uploading weights). They do instruct potentially risky actions: exporting secret keys (wallet export), storing secrets in a local .env and pushing them to a cloud secret store (Modal), and uploading submission data / encrypted weights with public-read ACLs. Those actions are functionally consistent with the protocol but increase exposure of sensitive material and could leak private data if misconfigured.
Install Mechanism
This is an instruction-only skill with no install spec or code files to execute — lowest installer risk. The docs recommend installing CLI via an external installer (sup) and Python packages via pip, which is typical and expected; nothing in the bundle performs arbitrary downloads or writes to disk at install time.
Credentials
The SKILL.md expects multiple highly sensitive environment variables (SOMA_SECRET_KEY, HF_TOKEN, S3_ACCESS_KEY_ID, S3_SECRET_ACCESS_KEY) which are proportionate to the described capabilities (on-chain signing, dataset access, artifact upload). The concern is the manifest/registry does not declare these required env vars, and the runtime guidance encourages exporting secret keys and pushing them to a remote secret store — both increase risk if a user accidentally supplies mainnet credentials or misconfigures public ACLs.
Persistence & Privilege
always:false and disable-model-invocation:false (normal). The skill is instruction-only and does not request permanent presence or attempt to modify other skills or system settings. There is no install step that gives it elevated persistence or system-wide privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install soma - After installation, invoke the skill by name or use
/soma - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
Declare required env vars and security notes, add merge_coins docs, deploy+trigger flow
v0.1.1
- Updated "Getting Started" section for a streamlined, step-by-step workflow focusing on fast deployment of the data submitter without needing local GPU or localnet.
- Added a credentials table with clear explanations of each required setting, why it's needed, and where to obtain it.
- Clarified that data submission is now the recommended entry point; emphasized how to deploy directly to Modal for GPU compute.
- Expanded the quick decision tree, offering a more direct route for new contributors and clarifying next actions.
- Improved instructions on how to claim rewards and what to do after initial setup, increasing accessibility for new users.
v0.1.0
Initial release of the SOMA skill — expert guidance for participating in the SOMA decentralized model network.
- Provides detailed workflows for data submission, model training, and claiming rewards.
- Includes guidance on SDK code generation, environment setup, and CLI usage.
- Offers strategic advice for maximizing SOMA rewards and choosing competitive niches.
- Links to official documentation and repository for further reference.
- Restricts scope to SOMA network-specific tasks; not for general ML or unrelated PyTorch/JAX questions.
Metadata
Frequently Asked Questions
What is Soma?
Expert guide for participating in the SOMA network — a decentralized system that trains a foundation model through competition. Provides data submission work... It is an AI Agent Skill for Claude Code / OpenClaw, with 355 downloads so far.
How do I install Soma?
Run "/install soma" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Soma free?
Yes, Soma is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Soma support?
Soma is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Soma?
It is built and maintained by Cfuaqz (@cfuaqz); the current version is v1.1.0.
More Skills