← 返回 Skills 市场
ant-1984

Check Wallet

作者 ant-1984 · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
382
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install check-wallet
功能描述
Query wallet addresses and on-chain balances on OpenAnt. Use when the agent or user wants to check wallet address, view balance, see how much SOL or ETH they...
使用说明 (SKILL.md)

Checking Wallet Addresses & Balances

Use the npx @openant-ai/cli@latest CLI to query your wallet addresses and on-chain balances. All queries go directly to Turnkey and on-chain RPCs — no backend API needed.

Always append --json to every command for structured, parseable output.

Confirm wallet is initialized and authed

npx @openant-ai/cli@latest status --json

If not authenticated, refer to the authenticate-openant skill.

List Wallet Addresses

npx @openant-ai/cli@latest wallet addresses --json

Returns all wallet addresses (Solana + EVM) managed by Turnkey:

{
  "success": true,
  "data": {
    "addresses": [
      { "chain": "Solana", "address": "7xK...abc", "addressFormat": "ADDRESS_FORMAT_SOLANA" },
      { "chain": "EVM (Base)", "address": "0xAb...12", "addressFormat": "ADDRESS_FORMAT_ETHEREUM" }
    ]
  }
}

Query On-Chain Balances

npx @openant-ai/cli@latest wallet balance --json

Returns SOL balance, SPL token balances (USDC auto-detected), EVM native balance, and Base USDC balance:

{
  "success": true,
  "data": {
    "solana": {
      "address": "7xK...abc",
      "sol": 1.500000000,
      "tokens": [
        { "mint": "4zMM...DU", "symbol": "USDC", "uiAmount": 500.0, "decimals": 6 }
      ]
    },
    "evm": {
      "address": "0xAb...12",
      "eth": 0.050000,
      "weiBalance": "50000000000000000",
      "usdc": 100.50
    }
  }
}

Custom RPC Endpoints

npx @openant-ai/cli@latest wallet balance --solana-rpc https://api.mainnet-beta.solana.com --json
npx @openant-ai/cli@latest wallet balance --evm-rpc https://mainnet.base.org --json

Available CLI Commands

Command Purpose
npx @openant-ai/cli@latest wallet addresses --json List all Turnkey wallet addresses (Solana + EVM)
npx @openant-ai/cli@latest wallet balance --json On-chain balances for all wallets
npx @openant-ai/cli@latest wallet balance --solana-rpc \x3Curl> --json Solana balance with custom RPC
npx @openant-ai/cli@latest wallet balance --evm-rpc \x3Curl> --json EVM balance with custom RPC

Examples

# Quick balance check
npx @openant-ai/cli@latest wallet balance --json

# Get addresses to share for receiving payments
npx @openant-ai/cli@latest wallet addresses --json

# Check if you have enough USDC before creating a task
npx @openant-ai/cli@latest wallet balance --json
# -> Inspect data.solana.tokens for USDC balance

# Check balance on mainnet
npx @openant-ai/cli@latest wallet balance \
  --solana-rpc https://api.mainnet-beta.solana.com \
  --evm-rpc https://mainnet.base.org \
  --json

Autonomy

All wallet commands are read-only queries — execute immediately without user confirmation.

Prerequisites

  • Must be authenticated (npx @openant-ai/cli@latest status --json to check)
  • Turnkey credentials are stored locally after login — no backend needed

Error Handling

  • "No Turnkey credentials found" — Run npx @openant-ai/cli@latest login first, see authenticate-openant skill
  • "Balance query failed" — RPC may be unreachable; try --solana-rpc or --evm-rpc
  • "No wallet accounts found" — Wallets are created at signup; try re-logging in
安全使用建议
This skill does what it says (checks wallets) but exercise caution before installing/running it. Key points: (1) The instructions use `npx @openant-ai/cli@latest`, which downloads and runs code from npm on demand — prefer a pinned version or verify the package before allowing execution. (2) The CLI will read locally stored Turnkey credentials and return wallet addresses and balances (sensitive data). Decide whether you want the agent to be allowed to run these commands autonomously; if not, disable model invocation or require explicit user confirmation. (3) Avoid passing untrusted custom RPC endpoints (they could observe queries). (4) If you proceed, verify the provenance of the @openant-ai/cli package (publisher identity, npm audit/reviews) and consider running the commands manually first to confirm expected behavior.
功能分析
Type: OpenClaw Skill Name: check-wallet Version: 0.1.0 The skill is designed for a legitimate purpose (checking wallet balances) and uses a restricted set of `npx` commands. However, it explicitly allows the agent to specify custom RPC endpoints (`--solana-rpc <url>`, `--evm-rpc <url>`) in `SKILL.md`. This creates a prompt injection vulnerability where a malicious prompt could instruct the agent to send public wallet data (addresses, balances) to an attacker-controlled RPC server for logging or tracking. Additionally, the phrase "execute immediately without user confirmation" in `SKILL.md` is a minor prompt injection attempt to bypass potential security prompts, though its effectiveness depends on the agent's implementation.
能力评估
Purpose & Capability
Name/description align with the instructions: all commands are for listing wallet addresses and on-chain balances via the OpenAnt/Turnkey CLI. No unrelated environment variables, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to run `npx @openant-ai/cli@latest ...` commands that will read locally stored Turnkey credentials and return wallet addresses/balances. It also states commands are executed immediately without user confirmation. While these actions match the purpose, they give the agent broad discretion to fetch code and expose potentially sensitive wallet addresses and balances.
Install Mechanism
The skill is instruction-only, but it relies on `npx @openant-ai/cli@latest` which will fetch and execute code from the npm registry at runtime. That is an implicit runtime install / remote code execution vector (and using the `latest` tag increases supply-chain risk). No pinned-release or trusted-host install is specified.
Credentials
The skill does not request any environment variables or external credentials in its metadata. It does rely on locally stored Turnkey credentials created by the CLI (reasonable for wallet queries), which is proportionate to the stated function.
Persistence & Privilege
always is false and the skill is user-invocable. However, model invocation is enabled by default and the SKILL.md explicitly says wallet commands are executed without user confirmation. That combination can expose sensitive wallet data if the agent invokes the skill autonomously; it's a privacy concern rather than a direct technical incoherence.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install check-wallet
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /check-wallet 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
check-wallet v0.1.0 - Initial release for querying wallet addresses and on-chain balances on OpenAnt. - Supports checking SOL, ETH, token (USDC) balances, and listing wallet addresses via CLI. - Handles wallet status checks and error cases (e.g., not authenticated, insufficient balance). - All commands are read-only and do not require user confirmation. - Includes options for custom Solana/EVM RPC endpoints for balance queries.
元数据
Slug check-wallet
版本 0.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Check Wallet 是什么?

Query wallet addresses and on-chain balances on OpenAnt. Use when the agent or user wants to check wallet address, view balance, see how much SOL or ETH they... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 382 次。

如何安装 Check Wallet?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install check-wallet」即可一键安装,无需额外配置。

Check Wallet 是免费的吗?

是的,Check Wallet 完全免费(开源免费),可自由下载、安装和使用。

Check Wallet 支持哪些平台?

Check Wallet 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Check Wallet?

由 ant-1984(@ant-1984)开发并维护,当前版本 v0.1.0。

💬 留言讨论