← 返回 Skills 市场
agnicpay-prog

Agnic

作者 Agnic.AI · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
103
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install agnic
功能描述
Complete AI agent wallet with payments, trading, email, and on-chain identity. Use when the user wants to manage their agent's wallet, make payments, trade t...
使用说明 (SKILL.md)

Agnic — Unified Agent Wallet Skill

This skill gives your AI agent a full identity stack: wallet, email, payments, trading, and on-chain identity.

Authentication

npx agnic@latest auth login    # Opens browser for OAuth login
npx agnic@latest auth logout   # Clear stored credentials

Balance & Funding

npx agnic@latest balance --json                     # All networks
npx agnic@latest balance --network base --json      # Specific network
npx agnic@latest address                            # Show wallet address

Supported networks: base, solana, base-sepolia, solana-devnet

X402 Payments

# Search for APIs
npx agnic@latest x402 search "weather data" --json

# Preview cost before paying
npx agnic@latest x402 preview \x3Curl>

# Make a paid API call
npx agnic@latest x402 pay \x3Curl> --method GET --json

Token Trading

# Get a quote
npx agnic@latest trade quote 10 USDC ETH --json

# Execute a trade (Base mainnet only)
npx agnic@latest trade 10 USDC ETH --json

Supported tokens: USDC, ETH, WETH, cbETH, DAI, AERO

Send USDC

npx agnic@latest send \x3Camount> \x3Caddress> --network base --json

Agent Identity

npx agnic@latest agent-identity --json    # ERC-8004 identity, trust score, delegation
npx agnic@latest status --json            # General account status

Agent Email

npx agnic@latest email address --json                     # Show email alias
npx agnic@latest email setup --display-name "My Agent"    # Create email alias
npx agnic@latest email inbox --limit 10 --json            # Check inbox
npx agnic@latest email send --to [email protected] --subject "Hello" --body "Message"
npx agnic@latest email reply --message-id \x3Cid> --body "Reply text"

AI Gateway

# List available AI models
npx agnic@latest ai models --json
npx agnic@latest ai models --provider openai --json

# Chat with an AI model
npx agnic@latest ai chat --model openai/gpt-4o --prompt 'Explain quantum computing' --json
npx agnic@latest ai chat --model meta-llama/llama-3.3-70b --prompt 'Summarize this text' --json

# Generate an image
npx agnic@latest ai image --prompt 'A sunset over mountains' --output sunset.png
npx agnic@latest ai image --prompt 'Logo design' --aspect-ratio 16:9 --output logo.png

340+ models from OpenAI, Anthropic, Google, Meta, Mistral, DeepSeek, and more. Model format: provider/model-name (e.g., openai/gpt-4o, google/gemini-2.5-flash-image) Free models: meta-llama/*, google/gemma-*, mistralai/*

Workflow: Sign Up + Pay + Report

  1. Check auth: npx agnic@latest status --json
  2. Sign up for a service using agent email (email send)
  3. Check inbox for verification (email inbox)
  4. Reply to verify (email reply)
  5. Make paid API call (x402 pay)
  6. Email results to user (email send)
安全使用建议
This skill will run `npx agnic@latest` commands at runtime to perform real-world wallet, payment, trading, and email actions. Before installing or enabling it: (1) Treat it as high-risk — it may request or use credentials and can execute arbitrary npm code; (2) Prefer a vetted, pinned package version (avoid `@latest`) and inspect the npm package source before allowing execution; (3) Require explicit interactive confirmations for any transaction or email send, or disable autonomous invocation; (4) Test in a sandbox with a throwaway wallet and minimal funds; (5) Consider restricting network/execution permissions or running the agent where npx cannot fetch remote code; (6) If you lack the ability to audit the npm package, decline installation or only use a version published by a known, trusted maintainer.
功能分析
Type: OpenClaw Skill Name: agnic Version: 1.0.0 The skill provides extensive capabilities for managing cryptocurrency wallets, executing trades, and handling emails, but relies on the high-risk execution of unpinned remote code via 'npx agnic@latest' in SKILL.md. This pattern introduces a significant supply chain vulnerability, as any update to the npm package could allow for the exfiltration of private keys or funds. While the functionality aligns with the stated purpose of an 'agent wallet,' the broad Bash permissions and lack of version pinning for sensitive financial operations warrant a suspicious classification.
能力标签
cryptorequires-walletcan-make-purchasesrequires-oauth-token
能力评估
Purpose & Capability
The name/description match the SKILL.md: it provides wallet, payments, trading, email, identity, and an AI gateway. Those capabilities legitimately require network access, auth flows, and signing operations. However, the skill does not declare any credentials or configuration even though those capabilities normally require keys or private signing material.
Instruction Scope
SKILL.md instructs the agent to run npx agnic@latest commands that perform OAuth, send email, make payments, execute trades, and chat with external AI models. Those are high-impact, real-world actions. The instructions contain no explicit safety checks, confirmation prompts, or limits and do not explain where credentials come from (local keys, prompts, or external services). The workflow encourages automatic signup/payment flows and emailing results, which could cause unintended transactions or data exfiltration.
Install Mechanism
No install spec is provided, but the allowed-tools and SKILL.md direct runtime use of `npx agnic@latest`, which fetches and executes code from the npm registry on demand. Running unpinned `@latest` packages via npx is a significant runtime code-fetch risk (no provenance/integrity guarantees or pinned version). The skill could execute arbitrary code fetched at runtime.
Credentials
The skill declares no required environment variables or credentials, yet the documented commands imply the need for OAuth tokens, wallet keys, payment signing, and AI provider API keys. The absence of declared credentials is a mismatch: the agent or the npx package will need to obtain/store secrets somehow (browser OAuth, local credential stores, or interactive prompts), which increases the chance of unexpected credential access or exfiltration.
Persistence & Privilege
always is false, but disable-model-invocation is false (the agent may invoke the skill autonomously). Combined with the ability to make payments, trade tokens, and send email, autonomous invocation increases blast radius. The skill also allows running remote code (npx) — if invoked autonomously this could lead to unapproved transactions or data leakage.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install agnic
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /agnic 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial publish of Agnic for Agnic wallet agent.
元数据
Slug agnic
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Agnic 是什么?

Complete AI agent wallet with payments, trading, email, and on-chain identity. Use when the user wants to manage their agent's wallet, make payments, trade t... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 103 次。

如何安装 Agnic?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install agnic」即可一键安装,无需额外配置。

Agnic 是免费的吗?

是的,Agnic 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Agnic 支持哪些平台?

Agnic 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Agnic?

由 Agnic.AI(@agnicpay-prog)开发并维护,当前版本 v1.0.0。

💬 留言讨论