← 返回 Skills 市场
Cardano Transactions
作者
Angelos Kappos
· GitHub ↗
· v1.0.0
· MIT-0
296
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install cardano-transactions
功能描述
Sign and submit Cardano transactions with explicit user confirmation.
使用说明 (SKILL.md)
Cardano Transactions
Sign and submit Cardano transactions with explicit user confirmation.
Prerequisites
@indigoprotocol/cardano-mcpserver running
MCP Tools
submit_transaction— Sign and submit a Cardano transaction CBOR
When to use
Use this skill when the user asks to:
- Submit or send a Cardano transaction
- Sign a transaction with their wallet
- Broadcast a pre-built transaction
Safety model
This tool is dangerous. Before calling submit_transaction:
- Summarize the transaction in plain English.
- Ask the user to explicitly confirm.
- Only proceed if the user says yes.
- Never submit a transaction automatically.
Data interpretation
- Input requires unsigned transaction CBOR (hex string).
- Output includes
transactionHashandtimestampon success. - The transaction is signed by the connected wallet's keys.
安全使用建议
Do not set your wallet seed phrase as an environment variable for this skill. Before installing, ask the author why SEED_PHRASE is required and whether signing can be done by a separate wallet/MCP service that holds the keys. If you must test, do so in an isolated environment with a throwaway wallet (no funds). Verify the npm package @indigoprotocol/cardano-mcp (publisher, homepage, source code) and confirm the MCP server endpoint is local/trusted. Prefer a workflow where the agent requests the MCP server to sign, and the agent never receives raw seed material. If the author cannot justify SEED_PHRASE being required, treat the skill as unsafe to use with real keys.
功能分析
Type: OpenClaw Skill
Name: cardano-transactions
Version: 1.0.0
The skill bundle provides a legitimate interface for signing and submitting Cardano transactions using the @indigoprotocol/cardano-mcp server. It includes robust safety instructions in SKILL.md and sub-skills/submit-tx.md that mandate explicit user confirmation and a plain-English summary before any transaction is processed. While the skill requires a SEED_PHRASE environment variable for the underlying MCP server, the instructions are designed to prevent unauthorized or automated execution, and no evidence of malicious intent or data exfiltration was found.
能力评估
Purpose & Capability
The skill's purpose (sign & submit Cardano transactions via an MCP tool) can normally be achieved by talking to a wallet/MCP server without the agent holding the seed phrase. Declaring SEED_PHRASE as a required env var is not consistent with the stated architecture (the docs explicitly say the seed is never exposed to the AI agent). The one declared install (@indigoprotocol/cardano-mcp) is appropriate for Cardano MCP functionality, so the main incoherence is the secret requirement.
Instruction Scope
SKILL.md instructs a safe confirmation flow (summarize transaction, ask explicit confirmation, only then call submit_transaction). However, the skill's metadata requires SEED_PHRASE while the prose states the seed phrase is never exposed — a direct contradiction. The allowed-tools include Read/Glob/Grep (file access/search) which could be used to read local secrets if the agent were permitted to act, creating scope creep relative to the minimal instructions.
Install Mechanism
Install is an npm package (@indigoprotocol/cardano-mcp). This is an expected mechanism for Cardano tooling (traceable on npm) and is moderate-risk but proportionate for the described capability. No arbitrary URL downloads or archive extracts are used.
Credentials
Requesting SEED_PHRASE is high privilege and should be unnecessary if an external MCP/wallet service signs transactions. The skill offers no justification for requiring this env var; moreover, its own documentation claims the seed is never exposed to the agent — a conflicting message. An env var named SEED_PHRASE is explicitly a secret-like credential and is disproportionate for a tool that should instead rely on the wallet/MCP service.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or system-wide config changes. There is no evidence it modifies other skills or agent settings. The only minor note is allowed-tools that permit reading files, which increases potential for accidental local-secret access if capabilities are misused.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install cardano-transactions - 安装完成后，直接呼叫该 Skill 的名称或使用
/cardano-transactions触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Cardano Transactions 是什么？
Sign and submit Cardano transactions with explicit user confirmation. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 296 次。
如何安装 Cardano Transactions？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install cardano-transactions」即可一键安装，无需额外配置。
Cardano Transactions 是免费的吗？
是的，Cardano Transactions 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Cardano Transactions 支持哪些平台？
Cardano Transactions 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Cardano Transactions？
由 Angelos Kappos（@adacapo21）开发并维护，当前版本 v1.0.0。
推荐 Skills