← 返回 Skills 市场
tolibear

Blinko

作者 tolibear · GitHub ↗ · v1.1.1
cross-platform ⚠ suspicious
1272
总下载
2
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install blinko
功能描述
Play Blinko (on-chain Plinko) headlessly on Abstract chain. Use when an agent wants to play Blinko games, check game stats, view leaderboards, or track honey rewards. Handles the full commit-reveal flow including API auth, on-chain game creation, simulation, and settlement.
使用说明 (SKILL.md)

Blinko

Play Blinko headlessly on Abstract. Provably fair Plinko with on-chain settlement.

Important

  • This skill signs on-chain transactions that spend real ETH. Use a dedicated hot wallet with only the funds you're willing to risk.
  • Each game costs gas (Abstract chain) on top of your bet amount.
  • Your private key is used locally to sign messages and transactions. It is sent to the Abstract RPC and Blinko API as signed outputs only, never as plaintext.
  • Agents can invoke this skill autonomously when installed.

Quick Start

Play a Game

export WALLET_PRIVATE_KEY=0x...
node scripts/play-blinko.js 0.001

Check Stats

node scripts/stats.js 0xYourAddress profile

Scripts

Script Purpose
play-blinko.js Play a full game (auth → create → commit → play → settle)
stats.js View profile, games, leaderboard, honey balance

Play

export WALLET_PRIVATE_KEY=0x...
node scripts/play-blinko.js [betETH] [--hard] [--v2]
Flag Effect
--hard Hard mode (0% main game RTP, must trigger bonus to win)
--v2 V2 algorithm and config

Examples:

node scripts/play-blinko.js 0.001                # Normal, 0.001 ETH
node scripts/play-blinko.js 0.005 --hard          # Hard mode
node scripts/play-blinko.js 0.002 --v2            # V2 algorithm
node scripts/play-blinko.js 0.003 --hard --v2     # V2 hard mode

Bet limits: 0.0001 - 0.1 ETH

Stats

node scripts/stats.js \x3Caddress> [command] [limit]
Command Shows
profile Name, honey, game stats, streak
games [N] Last N games with results
leaderboard Top 10 + your rank
honey Honey balance breakdown

How It Works

API → Chain → API → Chain
  1. Login — Sign message with wallet, get JWT
  2. Create — API generates game seed, returns server signature
  3. Commit — Call createGame() on-chain with ETH bet + random salt
  4. Play — API combines seeds, simulates physics, returns result
  5. Settle — Call cashOut() (win) or markGameAsLost() (loss) on-chain

All games are provably fair via commit-reveal scheme.

Game Mechanics

  • 10 balls dropped through 8 rows of pins
  • Bin multipliers: 2x, 1.5x, 0.5x, 0.2x, 0.1x, 0.1x, 0.2x, 0.5x, 1.5x, 2x
  • Bonus: Collect B-O-N-U-S letters to trigger bonus rounds (up to level 9)
  • Honey: Earned by hitting special pins (requires a referrer)

Key Information

Item Value
Chain Abstract (2741)
RPC https://api.abs.xyz (hardcoded)
Contract 0x1859072d67fdD26c8782C90A1E4F078901c0d763
API https://api.blinko.gg
Game blinko.gg

Environment Variables

Variable Required Description
WALLET_PRIVATE_KEY Yes (for play) Private key for signing transactions. Use a hot wallet.

Dependencies

npm install ethers@6
安全使用建议
This skill appears to do exactly what it says (play Blinko on Abstract) and contains the code to sign and submit real ETH transactions. Key points before installing: (1) The skill requires your private key (WALLET_PRIVATE_KEY) — this gives full control of that wallet. Use a dedicated hot wallet with only the funds you are willing to lose. (2) Registry metadata omitted the env var; ask the publisher why that mismatch exists and confirm the skill's provenance. (3) The skill talks to hardcoded endpoints (https://api.blinko.gg and https://api.abs.xyz) and a hardcoded contract address — verify those addresses are legitimate before use. (4) If you install, prefer manual invocation (disable autonomous agent actions or require confirmation) and inspect/run the code in an isolated environment. (5) If you only want read‑only info, consider using stats.js with a watch‑only address instead of providing a private key. If you need higher assurance, ask the publisher for a signed source/release or run the scripts on a throwaway wallet with minimal funds first.
功能分析
Type: OpenClaw Skill Name: blinko Version: 1.1.1 This skill is classified as suspicious due to its inherent high-risk capabilities, specifically requiring and using a `WALLET_PRIVATE_KEY` from environment variables to sign on-chain transactions that spend real ETH, as seen in `SKILL.md` and `scripts/play-blinko.js`. While the documentation is transparent about these actions and the code appears to handle the private key locally for signing (not exfiltrating it in plaintext), the direct interaction with a hot wallet and the ability to spend funds on-chain introduce significant financial risk. All network interactions are with the explicitly stated `https://api.blinko.gg` and `https://api.abs.xyz` endpoints.
能力评估
ℹ Purpose & Capability
The name/description and included scripts (play-blinko.js, stats.js) are coherent: the skill logs in, requests a server seed, calls createGame/cashOut on the on‑chain contract, and queries stats from api.blinko.gg. However the registry metadata at the top claimed no required env vars, while SKILL.md and the scripts clearly require WALLET_PRIVATE_KEY. That metadata mismatch is an inconsistency the publisher should explain.
✓ Instruction Scope
SKILL.md and the scripts are specific about actions: sign a login message, obtain a JWT, call the Blinko API, call Abstract RPC to create and settle on‑chain games, and show stats. The instructions do not attempt to read unrelated files or hidden credentials. They do transmit signatures and JWTs to api.blinko.gg and send signed transactions to the RPC endpoint (expected for this purpose).
✓ Install Mechanism
There is no installer that downloads arbitrary archives; this is instruction + source files with a simple package.json (ethers dependency). Risk is limited to running npm install / node on the files you download; no obscure remote installers or shortener URLs are used.
⚠ Credentials
The skill requires a single, highly sensitive environment variable: WALLET_PRIVATE_KEY (declared in SKILL.md metadata). That is proportionate to playing an on‑chain game, but it grants full control of the wallet's funds. The earlier registry section incorrectly listed no required env vars — this mismatch is concerning. No other credentials are requested, which is expected, but the private key risk is material.
ℹ Persistence & Privilege
always:false (good). The skill indicates agents may invoke it autonomously (default platform behavior). Because the skill can sign and submit transactions that spend ETH, autonomous invocation increases risk — consider restricting autonomous use or requiring user confirmation before any transaction is sent.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install blinko
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /blinko 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.1
- Removed README.md; all documentation now consolidated in SKILL.md. - In SKILL.md: lifted the restriction on autonomous invocation by agents—agents can now invoke the skill automatically. - Updated metadata in SKILL.md to remove disableModelInvocation flag.
v1.1.0
**Added safety warnings, agent safeguards, and environment variable documentation.** - Warns that real ETH is spent; recommends a dedicated hot wallet. - Explains gas usage and private key handling. - Notes that `disableModelInvocation` is enabled to block autonomous agent play. - Documents required environment variable: `WALLET_PRIVATE_KEY`. - Adds info about the hardcoded Abstract chain RPC URL. - Version bumped to 1.1.0.
v1.0.0
Initial release of Blinko: headless, on-chain Plinko for Abstract chain. - Play Blinko games programmatically with full commit-reveal flow. - Check player profiles, stats, leaderboards, and honey rewards via scripts. - Supports both standard and hard game modes, with V2 option. - Offers on-chain settlement and provably fair game mechanics. - Requires ethers v6 and wallet private key for transactions.
元数据
Slug blinko
版本 1.1.1
许可证 —
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Blinko 是什么？

Play Blinko (on-chain Plinko) headlessly on Abstract chain. Use when an agent wants to play Blinko games, check game stats, view leaderboards, or track honey rewards. Handles the full commit-reveal flow including API auth, on-chain game creation, simulation, and settlement. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1272 次。

如何安装 Blinko？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install blinko」即可一键安装，无需额外配置。

Blinko 是免费的吗？

是的，Blinko 完全免费（开源免费），可自由下载、安装和使用。

Blinko 支持哪些平台？

Blinko 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Blinko？

由 tolibear（@tolibear）开发并维护，当前版本 v1.1.1。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论