← 返回 Skills 市场

Cardano Identity

Name: Cardano Identity
Author: adacapo21

作者 Angelos Kappos · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

304

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cardano-identity

功能描述

Resolve and list ADAHandles for the connected Cardano wallet.

使用说明 (SKILL.md)

Cardano Identity — ADAHandles

Resolve and list ADAHandles for the connected Cardano wallet.

Prerequisites

@indigoprotocol/cardano-mcp server running

MCP Tools

get_adahandles — Retrieve all ADAHandles owned by the connected wallet

When to use

Use this skill when the user asks about:

Their ADAHandle or $handle
Human-readable wallet identifiers
Handle-to-address resolution

Data interpretation

ADAHandles are Cardano native tokens under a specific policy ID.
Each handle maps to a wallet address (e.g. $alice resolves to addr1...).
Handles are returned as plain strings without the $ prefix.

安全使用建议

Do not provide your wallet seed phrase unless you fully trust the package author and understand why signing authority is necessary. Before installing: 1) Ask the author why SEED_PHRASE is required and whether a read-only address or WalletConnect flow can be used instead. 2) Inspect the npm package @indigoprotocol/cardano-mcp source or its maintainer reputation. 3) If you must test, do so in an isolated environment and never expose your real seed — prefer a throwaway/test wallet. 4) Confirm the MCP server endpoint and network behavior (where data is sent) so sensitive data cannot be exfiltrated unexpectedly.

功能分析

Type: OpenClaw Skill Name: cardano-identity Version: 1.0.0 The skill requires the 'SEED_PHRASE' environment variable to be provided to the agent (SKILL.md), which is a high-risk security practice as it exposes the wallet's master recovery phrase. While the stated purpose of resolving ADAHandles is legitimate and the policy ID in 'references/mcp-tools.md' is correct, the requirement for raw mnemonic phrases creates a significant risk of credential theft if the environment or the '@indigoprotocol/cardano-mcp' package is compromised.

能力评估

⚠ Purpose & Capability

The skill claims only to resolve/list ADAHandles for a 'connected wallet'. Listing or resolving handles is a read-only blockchain operation and typically does not require a wallet seed phrase. Requiring SEED_PHRASE is not coherent with the stated, read-only purpose and suggests unnecessary sensitive access.

⚠ Instruction Scope

SKILL.md instructs use of an MCP tool (get_adahandles) and a running @indigoprotocol/cardano-mcp server but does not explain why a seed phrase is needed or how it will be used. Allowed tools (Read, Glob, Grep) can access local files; combined with the SEED_PHRASE requirement this increases the potential for sensitive data access without clear justification.

ℹ Install Mechanism

The install uses an npm package (@indigoprotocol/cardano-mcp), which is an expected and traceable mechanism for Node-based MCP tooling. This is moderate risk—inspect the package source and maintainers before trust, but the mechanism itself is not an immediate red flag.

⚠ Credentials

The only required environment variable is SEED_PHRASE. A wallet seed is extremely sensitive; requesting it for a read-only listing task is disproportionate. The skill does not declare less-risky alternatives (wallet address, read-only API key, WalletConnect), nor justify why signing authority is required.

✓ Persistence & Privilege

The skill does not request always: true and does not declare persistent system-wide modifications. It uses normal autonomous-invocation defaults; no excessive privilege is requested in this dimension.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cardano-identity
安装完成后，直接呼叫该 Skill 的名称或使用 /cardano-identity 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release

元数据

Slug cardano-identity

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题