← Back to Skills Marketplace
774
Downloads
4
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install w3connect
Description
Access ETH wallet address and securely send ETH or USDC on Ethereum or Base chains with 2FA authentication code verification.
Usage Guidance
This skill expects a local wallet/signing service listening on http://127.0.0.1:5333 (web3b0x or similar). If you do not have that service running, the calls will fail. If you do run such a service, the agent will be able to call it and submit real transactions when given a valid 2FA code — only provide one-time codes when you intend to authorize a transfer. Ask the skill author for the service's expected binary/software and documentation (there's no homepage or source listed). Note the small inconsistency in SKILL.md metadata claiming python/pip are required; confirm whether any local components or installs are necessary before use. Finally, treat this as powerful: verify the local service code and network exposure (ensure it truly binds to localhost and is from a trusted source) before allowing the agent to perform payments.
Capability Analysis
Type: OpenClaw Skill
Name: w3connect
Version: 0.3.0
The skill provides capabilities to interact with a local web3 service (http://127.0.0.1:5333) to get wallet addresses and initiate financial transactions (sending ETH/USDC) as seen in GET_ADDRESS.md, PAY_TO_EMAIL.md, and SEND.md. While these operations require an authenticator code, the inherent high-risk nature of fund transfers and the reliance on an unverified local service make this skill suspicious. There is no direct evidence of malicious intent like data exfiltration or backdoor installation within the skill bundle itself, but the capabilities could be misused if the agent is compromised or the local service has vulnerabilities.
Capability Assessment
Purpose & Capability
Name/description (access address and send ETH/USDC with 2FA) matches the instructions: all actions are HTTP calls to a local wallet API (127.0.0.1:5333) for address, send, and pay-to-email. There are no unrelated credentials or external services requested.
Instruction Scope
All runtime instructions tell the agent to call local endpoints (GET /address, /send, /pay2email). That is coherent with a local signing service, but it means the agent will directly trigger on-chain transactions if given a valid 2FA code. The SKILL.md also says 'do not ask the user to execute the curl' (the agent should call the local API). There is no instruction to read unrelated files or environment variables.
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk. This is the lowest-risk install mechanism. Minor inconsistency: SKILL.md includes metadata claiming python and pip in a 'nanobot' requires field, but the registry lists no required binaries.
Credentials
The skill declares no required environment variables or credentials, which is appropriate. It relies on the user-supplied 6-digit authenticator code (passed as a parameter) rather than persistent secrets. No unrelated secrets or config paths are requested.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and has no install-time persistence. The agent is allowed to invoke it autonomously by default, which is normal.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install w3connect - After installation, invoke the skill by name or use
/w3connect - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.3.0
w3connect 0.3.0
- Added modular documentation files: GET_ADDRESS.md, SEND.md, PAY_TO_EMAIL.md.
- Updated SKILL.md to streamline instructions and direct users to the new documentation files for usage details.
- Simplified initial description and removed redundant usage details from SKILL.md.
v0.2.0
w3connect 0.2.0 introduces support for new payment features and improved usage instructions.
- Added instructions for installing and configuring the required web3b0x lockbox and authenticator app for enhanced security.
- Introduced a new "Pay to email in PUSDC" feature, allowing users to send USDC to an email address without knowing the recipient’s ETH address.
- Updated the "Send" feature to clarify it now supports sending ETH or USDC only on the "base" chain via web3b0x.
- Enhanced documentation, including updated curl command examples and clearer parameter explanations.
- Clarified that all blockchain operations should be performed through the w3connect skill, not by directly executing curl commands.
v0.1.0
- Initial release of w3connect skill.
- Enables access to blockchain asset and transaction signature features.
- Provides API endpoints for retrieving ETH-compatible wallet addresses.
- Supports sending ETH or USDC on Ethereum and Base chains with one-time Authenticator code verification.
Metadata
Frequently Asked Questions
What is W3connect?
Access ETH wallet address and securely send ETH or USDC on Ethereum or Base chains with 2FA authentication code verification. It is an AI Agent Skill for Claude Code / OpenClaw, with 774 downloads so far.
How do I install W3connect?
Run "/install w3connect" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is W3connect free?
Yes, W3connect is completely free (open-source). You can download, install and use it at no cost.
Which platforms does W3connect support?
W3connect is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created W3connect?
It is built and maintained by KJ (@kernel1983); the current version is v0.3.0.
More Skills