← 返回 Skills 市场

Cavos Cli

Name: Cavos Cli
Author: adrianvrj

作者 adrianvrj · GitHub ↗ · v0.1.0

cross-platform ⚠ suspicious

950

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cavos-cli-skill

功能描述

Interact with the Cavos CLI for Starknet wallet operations. Use for transfers, approvals, contract calls, session management, and transaction monitoring.

使用说明 (SKILL.md)

Cavos CLI Skill

This skill allows you to interact with the Cavos CLI (@cavos/cli) to manage Starknet wallets, perform transfers, and execute contract calls.

Core Commands

Always use the --json flag when possible to get structured output.

1. Identity & Session

Who Am I: Check current session and wallet address.
```
npx @cavos/cli whoami --json
```
Session Status: Check if the session is active/expired.
```
npx @cavos/cli session-status --json
```
Import Session: Import a session token provisioned from the Dashboard.
```
npx @cavos/cli session import \x3Ctoken>
```

2. Assets & Transfers

Check Balance:

npx @cavos/cli balance --token \x3CSTRK|ETH|address> --json

Transfer Tokens:

npx @cavos/cli transfer --to \x3Caddress> --amount \x3Camount> --token \x3Ctoken> --json

3. Contract Interactions

Approve Spending:

npx @cavos/cli approve --spender \x3Caddress> --amount \x3Camount> --token \x3Ctoken> --json

Execute Call:

npx @cavos/cli execute --contract \x3Caddress> --entrypoint \x3Cmethod> --calldata \x3Ccomma_separated_vals> --json

Read Call:

npx @cavos/cli call --contract \x3Caddress> --entrypoint \x3Cmethod> --calldata \x3Cvals> --json

4. Advanced Operations

Multicall: Batch multiple calls.

npx @cavos/cli multicall --calls '\x3Cjson_array>' --json

Simulate/Estimate: Check tx before sending.

npx @cavos/cli simulate --contract \x3Caddr> --entrypoint \x3Cmethod> --calldata \x3Cvals> --json

Transaction Status:

npx @cavos/cli tx status \x3Chash> --json

Best Practices

Verify Balance: Always run balance before a transfer.
Check Session: Run whoami or session-status at the start of a workflow to ensure authentication.
Use JSON: Parsing JSON output is safer than regexing stdout.
Calldata: Calldata for execute and call should be comma-separated strings (e.g., 0x1,100).

安全使用建议

This skill is coherent for controlling a Cavos/Starknet wallet via the @cavos/cli, but note: npx will download and execute the @cavos/cli package from npm at runtime — verify the package name, publisher, and version before running. Do not paste session tokens, private keys, or other secrets into chat; supply them only to the CLI in a secure context. Before sending transfers/approvals, double-check addresses and amounts and consider running simulate/estimate first. If you prefer more control, install @cavos/cli locally from a verified source and run it directly rather than via npx.

功能分析

Type: OpenClaw Skill Name: cavos-cli-skill Version: 0.1.0 The skill is classified as suspicious due to its inherent high-risk capabilities, specifically enabling direct interaction with a Starknet wallet for financial transactions (transfers, approvals) and arbitrary contract calls via the `npx @cavos/cli` command in `SKILL.md`. While these operations align with the stated purpose, they carry significant risk of financial loss if the AI agent is compromised or prompted maliciously. Additionally, the reliance on `npx` to download and execute an external package (`@cavos/cli`) introduces a supply chain vulnerability, as the integrity of this external dependency is critical. There is no evidence of intentional malicious prompt injection within `SKILL.md` or other files, nor any attempts at data exfiltration or persistence from the skill bundle itself.

能力评估

✓ Purpose & Capability

Name/description (Cavos CLI for Starknet wallet ops) matches the required binary (npx) and the SKILL.md commands (npx @cavos/cli). There are no unexpected credentials, binaries, or config paths requested.

✓ Instruction Scope

SKILL.md only instructs running specific cavos CLI commands (whoami, balance, transfer, execute, etc.) and to use --json. It does not instruct reading unrelated files or environment variables. It does mention importing a session token provided from the Dashboard (expected for auth).

ℹ Install Mechanism

No install spec (instruction-only), which is low-risk. However, the runtime commands use npx to fetch and execute @cavos/cli from the npm registry on demand — that implicitly downloads and runs remote code. This is expected for an npx-based CLI but is a material runtime action the user should be aware of.

✓ Credentials

The skill declares no required env vars or credentials. That aligns with the instructions, which expect an explicit session token to be provided when running session import. There is no hidden request for unrelated secrets or external credentials.

✓ Persistence & Privilege

always is false and the skill has no install step that modifies system or agent-wide settings. It does not request persistent privileges or modify other skills' configs.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cavos-cli-skill
安装完成后，直接呼叫该 Skill 的名称或使用 /cavos-cli-skill 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial release of cavos-cli-skill. - Provides commands to interact with the Cavos CLI for Starknet wallet management, asset transfers, approvals, and contract operations. - Supports session import and status checks. - Includes guidance for using structured JSON output. - Details best practices and usage examples for common CLI operations.

元数据

Slug cavos-cli-skill

版本 0.1.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Cavos Cli 是什么？

Interact with the Cavos CLI for Starknet wallet operations. Use for transfers, approvals, contract calls, session management, and transaction monitoring. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 950 次。

如何安装 Cavos Cli？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install cavos-cli-skill」即可一键安装，无需额外配置。

Cavos Cli 是免费的吗？

是的，Cavos Cli 完全免费（开源免费），可自由下载、安装和使用。

Cavos Cli 支持哪些平台？

Cavos Cli 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Cavos Cli？

由 adrianvrj（@adrianvrj）开发并维护，当前版本 v0.1.0。