← 返回 Skills 市场
kilb

AWP Wallet Skill

作者 awp-core · GitHub ↗ · v0.15.0 · MIT-0
cross-platform ⚠ suspicious
198
总下载
1
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install awp-wallet
功能描述
Use when the user says "send ETH/USDC to 0x...", "check my balance", "how much do I have", "approve token spending", "sign this message", "estimate gas", "wh...
使用说明 (SKILL.md)

AWP Wallet

EVM wallet for AI agents. All commands output JSON. No password needed — encryption is auto-managed.

Step 1 — Ensure Installed

awp-wallet --version 2>/dev/null || {
  git clone https://github.com/awp-core/awp-wallet.git /tmp/awp-wallet &&
  cd /tmp/awp-wallet && bash install.sh
}

If awp-wallet: command not found persists after install, run:

export PATH="$HOME/.local/bin:$PATH"

Step 2 — Ensure Wallet Exists

awp-wallet receive 2>/dev/null || awp-wallet init

When creating a new wallet, tell the user: [WALLET] created new wallet: 0x...

Step 3 — Unlock Session

Every operation that reads or writes on-chain needs a session token.

TOKEN=$(awp-wallet unlock --duration 3600 | jq -r '.sessionToken')

If you get Invalid or expired session, re-run this step.

Step 4 — Execute the User's Request

Pick the right command based on what the user asked. $T = the session token from Step 3.

"Check my balance" / "How much do I have"

awp-wallet balance --token $T --chain ethereum
awp-wallet balance --token $T --chain base --asset usdc
awp-wallet portfolio --token $T                          # all chains overview

"Send X to 0x..."

Before sending, confirm with the user:

[TX] about to send:
     to:      0xBob...1234
     amount:  50 USDC
     chain:   Base
     proceed? (y/n)

Then:

awp-wallet send --token $T --to 0xAddr --amount 0.1 --chain ethereum
awp-wallet send --token $T --to 0xAddr --amount 100 --asset usdc --chain base

"What's my address" / "Where do I receive"

awp-wallet receive

No session token needed.

"Approve spending" / "Revoke approval"

awp-wallet approve --token $T --asset usdc --spender 0xRouter --amount 1000 --chain base
awp-wallet revoke  --token $T --asset usdc --spender 0xRouter --chain base

"Sign this message"

awp-wallet sign-message --token $T --message "Hello World"
awp-wallet sign-typed-data --token $T --data '{"types":{...},"primaryType":"...","domain":{...},"message":{...}}'

"Estimate gas"

awp-wallet estimate --to 0xAddr --amount 0.1 --chain ethereum

"Check transaction status"

awp-wallet tx-status --hash 0xHash --chain ethereum

"Show history"

awp-wallet history --token $T --chain ethereum --limit 20

"Send to multiple addresses"

awp-wallet batch --token $T --chain base \
  --ops '[{"to":"0xA","amount":"10","asset":"usdc"},{"to":"0xB","amount":"20","asset":"usdc"}]'

Step 5 — Lock When Done

awp-wallet lock

Choosing a Chain

--chain accepts a name or numeric ID. Default: ethereum.

Preconfigured: ethereum base bsc arbitrum optimism polygon avalanche fantom zksync linea scroll mantle blast celo sepolia base-sepolia

Any EVM chain: --chain 99999 --rpc-url https://custom.rpc.com

If the user says "on Base" → --chain base. If they say "on BSC" or "BNB Chain" → --chain bsc. If no chain is mentioned, use ethereum.

Choosing an Asset

--asset accepts a symbol or contract address. Omit for native currency (ETH, BNB, etc.).

Built-in: usdc usdt awp weth wbnb dai

Any token: --asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Output Tags

Use these tags when presenting results to the user:

Tag When Example
[QUERY] Balance, gas estimates [QUERY] ETH balance: 1.5 ETH ($3,750)
[TX] After a transaction [TX] sent 50 USDC → 0xBob (hash: 0x...) + explorer link
[SIGN] After signing [SIGN] message signed: 0x...
[WALLET] Wallet info [WALLET] address: 0x...

Error Recovery

Error Cause Fix
command not found Not installed Step 1
No wallet found No wallet yet awp-wallet init
Invalid or expired session Token expired Re-run Step 3
Insufficient balance Not enough funds Tell user; suggest --mode gasless if no native gas
Daily limit exceeded Safety limit hit Tell user to try again in 24h

Advanced (rarely needed)

awp-wallet chains                                       # list all chains
awp-wallet chain-info --chain zksync                    # chain details
awp-wallet wallets                                      # list wallet profiles
awp-wallet wallet-id                                    # current profile ID
awp-wallet status --token $T                            # session info
awp-wallet allowances --token $T --asset usdc --spender 0xRouter --chain base
awp-wallet verify-log                                   # audit log integrity
awp-wallet upgrade-7702 --token $T --chain ethereum     # EIP-7702 upgrade
awp-wallet revoke-7702 --token $T --chain ethereum      # revoke EIP-7702
awp-wallet deploy-4337 --token $T --chain ethereum      # smart account status

Environment Variables (all optional)

Variable Purpose
WALLET_PASSWORD Explicit password (default: auto-managed). Required for export and change-password.
PIMLICO_API_KEY Enable gasless ERC-4337 transactions
AWP_AGENT_ID Multi-agent wallet isolation
AWP_SESSION_ID Per-session wallet isolation

Gasless mode auto-activates when the wallet has no native gas and PIMLICO_API_KEY is set. Force with --mode gasless.

安全使用建议
This skill appears to be a legitimate EVM wallet CLI, but it makes persistent changes and handles secrets — so proceed only if you trust the source and have reviewed the code, especially the keystore/session code. Things to consider before installing: - The installer will clone from GitHub, run npm install, add ~/.local/bin to your PATH (it may append to your shell rc) and create $HOME/.openclaw-wallet where keys/sessions/config live. If you don't want those changes, do not install. - The CLI exposes powerful operations: export (mnemonic), sign-message, unlock (session tokens) and can send transactions. If an agent is tricked into running export or unlock with full scope, it could leak your seed or sign transactions. Never provide your mnemonic/private key to an untrusted agent. - The package will read environment variables for gasless providers and RPC templates (PIMLICO_API_KEY, ALCHEMY_API_KEY, STACKUP_API_KEY and arbitrary names referenced in your config). Those env vars are not declared as required in the registry metadata — expect runtime errors or hidden dependencies if config references missing variables. - The installer may attempt sudo npm link if normal linking fails — be cautious about running scripts that invoke sudo. - If you plan to use this skill: (1) review scripts/lib/keystore.js and session.js to understand how secrets are stored and exported, (2) verify the upstream GitHub repo and the npm package checksum, (3) consider running in an isolated environment or throwaway account, and (4) avoid using the 'export' or 'unlock --scope full' commands unless you explicitly trust the runtime and agent. Given the combination of persistent file writes, shell rc modifications, and undeclared environment dependencies, I recommend manual code review (especially keystore/session) before installing; if you cannot review, treat this skill as risky and avoid installing it on machines holding real funds.
功能分析
Type: OpenClaw Skill Name: awp-wallet Version: 0.15.0 The awp-wallet bundle is a legitimate EVM wallet implementation designed for AI agents, featuring robust security controls including session-based access, transaction validation, and an integrity-verified audit log (tx-log.jsonl). The code implements defensive measures such as daily spending limits, per-transaction maximums, and recipient allowlists (scripts/lib/tx-validator.js) to prevent unauthorized fund depletion. While the installer (install.sh) modifies shell configuration files for PATH persistence and the keystore logic (scripts/lib/keystore.js) manages sensitive private keys, these actions are consistent with the stated purpose of a CLI wallet and are handled using appropriate file permissions (0600/0700) and encryption (AES-256-GCM).
能力评估
Purpose & Capability
Name/description match the files and commands: this is an EVM wallet CLI with balance, send, approve, sign, gasless flows. Requested binaries (node, git, openssl, npm) and an npm package install are reasonable for this purpose. Installer creating a per-user wallet directory and CLI shim is consistent with a wallet tool.
Instruction Scope
SKILL.md instructs the agent to clone/run the installer, init/unlock the wallet and run CLI commands. Those instructions are within wallet scope (balance, send, sign). However the guide relies on session tokens and contains actions that can export seeds/sign arbitrary messages. The file-level guidance asks the agent to confirm transfers, but that is a human-facing convention in the README — the CLI and scripts will perform operations programmatically if invoked. The SKILL.md does not clearly enumerate all environment variables or config-driven behaviors the code will read at runtime (see environment_proportionality).
Install Mechanism
Installer clones a GitHub repo and runs npm install — a generally standard flow. But install.sh will create ~/.local/bin symlink, and persist PATH changes by appending to the user's shell RC file (.bashrc, .zshrc or .profile). It also writes profile data under $HOME/.openclaw-wallet and can save API keys to a profile .env. The installer attempts npm link (including sudo fallback) and writes files to the user home; these persistent modifications are legitimate for a CLI wallet but are higher-risk than an instruction-only skill and should be accepted only after inspecting the source.
Credentials
Registry metadata declares no required environment variables, but the code clearly reads and relies on several env vars at runtime: PIMLICO_API_KEY / ALCHEMY_API_KEY / STACKUP_API_KEY (for bundler/paymaster/gasless paths), arbitrary env placeholders used to expand RPC URL templates (getRpcUrl substitutes process.env[k]), and optional WALLET_PASSWORD, AWP_AGENT_ID, AWP_SESSION_ID. createClients will throw if bundler providers are configured but no API keys are set. In short: the skill may require or read sensitive keys and arbitrary env vars not declared in metadata — this is a mismatch and a potential surprise.
Persistence & Privilege
The skill does not request always:true, but the installer creates persistent state: ~/.openclaw-wallet, wallet keystore files, a session-secret file, and may persist API keys to a profile .env. It also edits shell rc files to add ~/.local/bin to PATH and may run npm link (including sudo). These are expected for a wallet but are privileged, long-lived changes that warrant manual review before granting.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install awp-wallet
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /awp-wallet 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.15.0
- Documentation updated for clarity and conciseness; user steps reorganized and simplified. - Installation and usage instructions have been streamlined, with improved guidance for error recovery and output messaging. - The old "CLAUDE-WEB3-GUIDE.md" documentation file was removed. - Advanced and rarely-used options consolidated into a separate section for easier reference. - Output tag instructions clarified, with concrete examples added. - All command guidance and environment variables reviewed and updated for accuracy.
v0.14.2
- Added docs/CLAUDE-WEB3-GUIDE.md to provide additional documentation or guidance. - Updated SKILL.md to add a new "Environment Variables" section detailing optional environment variables for configuration. - No user-facing feature or interface changes. Core usage and workflow remain unchanged.
v0.14.1
- Removed the file docs/CLAUDE-WEB3-GUIDE.md. - Updated required binaries in metadata: added git, removed reference to ALCHEMY_API_KEY and PIMLICO_API_KEY as required env variables (now documented only in usage). - No changes to core features, interface, or actions—this version is primarily a documentation and metadata cleanup.
v0.14.0
- Major documentation refactor: simplified and condensed user and agent setup instructions. - Markdown guide docs/CLAUDE-WEB3-GUIDE.md added; old README.md and scripts/setup.sh removed. - Easier install: single install.sh script for setup, wallet creation, and dependencies. - Password handling/prompting simplified—wallet now auto-manages encryption, never asks user for a password. - Streamlined error recovery and output conventions. - SKILL.md is now much shorter and easier to follow, retaining all essential usage and safety instructions.
v0.12.4
awp-wallet 0.12.4 - Added multi-agent isolation support with `AWP_SESSION_ID` and `AWP_AGENT_ID` environment variables. - Updated documentation to reflect enhanced use-cases and new isolation behavior. - Added new internal script: `scripts/lib/paths.js`. - Introduced README.md with updated instructions and examples.
v0.12.3
- Notify user when a new wallet is created, instead of performing setup completely silently. - Documentation updated: Environment variables `PIMLICO_API_KEY` and `ALCHEMY_API_KEY` explained for gasless and RPC support. - Simplified command examples: all write actions default to passwordless mode. - Minor improvements to user messaging and error handling instructions. - Clarified that passwords are always managed internally and never shown or requested from user.
v0.12.2
**Significant update: Simplified and streamlined wallet usage, removing setup/logging from user view.** - Removed the README.md file. - User-facing documentation is now much simpler: setup/password management is entirely invisible in default mode; no setup or progress logs shown to user. - Auto-managed password: no need to set WALLET_PASSWORD for regular use; password is generated and stored internally. - Changed instructions to silently recover from errors and perform installation/setup if needed, without showing user any internals. - User now only sees clean results and tagged outputs (e.g., [TX], [QUERY]), never raw errors or logs. - All explicit setup and progress output, as well as wallet/session initialization details, have been removed from user interaction.
v0.12.1
- Improved documentation for all wallet actions, commands, and outputs. - Clarified setup, error recovery, and gasless transaction handling. - Added detailed usage examples for key features like balance checks, transfers, approvals, signing, and batch operations. - Provided clear output tags and standardized user-facing messages for all wallet operations. - Updated instructions for safe transaction confirmation previews and automatic error recovery.
元数据
Slug awp-wallet
版本 0.15.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 8
常见问题

AWP Wallet Skill 是什么?

Use when the user says "send ETH/USDC to 0x...", "check my balance", "how much do I have", "approve token spending", "sign this message", "estimate gas", "wh... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 198 次。

如何安装 AWP Wallet Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install awp-wallet」即可一键安装,无需额外配置。

AWP Wallet Skill 是免费的吗?

是的,AWP Wallet Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

AWP Wallet Skill 支持哪些平台?

AWP Wallet Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 AWP Wallet Skill?

由 awp-core(@kilb)开发并维护,当前版本 v0.15.0。

💬 留言讨论