← Back to Skills Marketplace
1277
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install usd1transaction
Description
Securely transfer USD1 (USDC on Wormhole) between wallets using Wormhole Liquidity Facility on Testnet by default.
Usage Guidance
This skill appears to implement a testnet USDC transfer using the Wormhole SDK and will ask you to provide a wallet private key at runtime. Before installing or using it: (1) do NOT supply a real/production private key — use a throwaway testnet wallet only; (2) review the bundled code and dependencies yourself or have a maintainer you trust audit them (package-lock includes many transitive packages and some deprecation notes); (3) prefer designs that use delegated signing (e.g., signing service, hardware wallet, or ephemeral key signing) rather than handing raw private keys to a skill; (4) verify the skill author and source (there is no homepage or author metadata here). If you must test it, create a testnet wallet with minimal funds and monitor transactions closely.
Capability Analysis
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
Suspicious High-Entropy/Eval files: 1
The skill is classified as suspicious due to its direct handling of a user-provided private key for initiating cryptocurrency transfers. While this capability is explicitly declared in `SKILL.md` and implemented as the core function in `index.js`, the inherent high risk associated with processing sensitive credentials like private keys warrants a 'suspicious' classification, even without clear evidence of intentional malicious exfiltration or unauthorized use beyond the stated purpose. The skill defaults to Testnet, which is a positive security practice, and there are no signs of prompt injection, obfuscation, or malicious dependencies.
Capability Assessment
Purpose & Capability
The SKILL.md and index.js align: both describe transferring USD1/USDC over Wormhole Testnet and the code uses @wormhole-foundation SDK to perform a token transfer. However the registry metadata lacks a public description, homepage, or author — reducing provenance and making it harder to trust the publisher.
Instruction Scope
The runtime instructions and code require the user's wallet privateKey as an input parameter (required). That is coherent for a transfer skill, but it means the agent runtime will receive a raw private key. SKILL.md cautions to use secure input and Testnet only, which is good, but the instructions give the agent direct access to a secret that controls funds — a significant risk if the agent environment or skill execution is compromised.
Install Mechanism
There is no install spec (instruction-only style) but the package.json/package-lock are bundled and list @wormhole-foundation SDK dependencies and many transitive packages. No external arbitrary download URLs are used. The large dependency tree increases surface area and includes components (in package-lock) with deprecation/security notes, which should be audited before running.
Credentials
The skill does not request environment variables or platform credentials — instead it requires a privateKey passed at runtime. While necessary for signing a transaction, asking for a raw private key is high privilege: it grants full control of the wallet. The registry does not declare a primary credential or explain secure handling/storage of the key beyond the SKILL.md note. This is proportionate to the stated functionality but requires strong operational safeguards (use testnet only, ephemeral keys, or a signing service/hardware wallet).
Persistence & Privilege
The skill does not request always:true and does not modify system or other skills' configuration. Model invocation is allowed (default), which is normal. There is no evidence it attempts to persist credentials or change agent configuration autonomously.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install usd1transaction - After installation, invoke the skill by name or use
/usd1transaction - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of USD1 WLF Transfer Skill.
- Enables secure transfer of USD1 (USDC on Wormhole) between wallets via Wormhole Liquidity Facility.
- Supports Testnet by default for safer testing.
- Allows balance checking, transaction sending, and returns transaction hash, status, and detailed messages.
- Requires sender’s private key and recipient address as input.
- Emphasizes secure handling of private keys and testnet-only usage until production.
Metadata
Frequently Asked Questions
What is USD1 Transaction?
Securely transfer USD1 (USDC on Wormhole) between wallets using Wormhole Liquidity Facility on Testnet by default. It is an AI Agent Skill for Claude Code / OpenClaw, with 1277 downloads so far.
How do I install USD1 Transaction?
Run "/install usd1transaction" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is USD1 Transaction free?
Yes, USD1 Transaction is completely free (open-source). You can download, install and use it at no cost.
Which platforms does USD1 Transaction support?
USD1 Transaction is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created USD1 Transaction?
It is built and maintained by AsgherAli (@asgherali); the current version is v1.0.0.
More Skills