← 返回 Skills 市场
webcraft3r

ConsortiumAI Create Account

作者 Web Crafter 🕸️ · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
918
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install consortiumai-create-account
功能描述
Create a custodial wallet account on Consortium AI.
使用说明 (SKILL.md)

Instructions

This skill provides account creation functionality for Consortium AI.

It calls an external API that creates a custodial wallet account on Consortium AI.

How to run (implementation)

From the skill directory, you can call the API either by making HTTP requests (see API Reference) or by running the bundled script:

  • Create Account: node scripts/create-account.js \x3CWALLET_ADDRESS> or npm run create-account -- \x3CWALLET_ADDRESS> Example: node scripts/create-account.js 5h4...3k1

The script requires TRADING_ANALYSIS_API_KEY to be set. It prints the API response as JSON to stdout on success, or error JSON to stderr and exits non-zero on failure.


Setup

Set the API key as an environment variable before using this skill:

export TRADING_ANALYSIS_API_KEY=your-secret-api-key

To get an API key, contact Consortium AI on X.


API Reference

Backend API base URL: https://api.consortiumai.org

Endpoint: POST https://api.consortiumai.org/api/custodial-wallet/create-with-api-key Creates a new custodial wallet account.

Authentication

API key only (no JWT). Send the key in one of:

  • Header: x-api-key: \x3CTRADING_ANALYSIS_API_KEY>
  • Header: Authorization: Bearer \x3CTRADING_ANALYSIS_API_KEY>

Request Body

{
  "walletAddress": "5h4...YourWalletAddress...3k1"
}

Success response (201 Created)

{
  "message": "Custodial wallet created successfully",
  "data": {
    "id": "wallet_uuid",
    "wallet_address": "GeneratedCustodialWalletAddress",
    "user_id": "user_uuid",
    "created_at": "2024-03-20T10:00:00.000Z",
    "updated_at": "2024-03-20T10:00:00.000Z"
  }
}

Error responses

Status When Body (example)
400 Missing walletAddress { "error": "Missing walletAddress" }
401 Missing or wrong API key { "success": false, "message": "Invalid or missing API key" }
404 User not found for wallet address { "error": "User not found for the provided wallet address" }

Available Functions

createCustodialWallet(walletAddress)

Purpose Create a new custodial wallet account on Consortium AI.

Parameters

  • walletAddress (string): The user's wallet address.

Expected Behavior

  • Sends a POST request to https://api.consortiumai.org/api/custodial-wallet/create-with-api-key
  • Authenticates with x-api-key using TRADING_ANALYSIS_API_KEY
  • Returns the created wallet details.

Returns

  • Wallet ID
  • Generated Custodial Wallet Address
  • User ID
  • Creation timestamp
安全使用建议
This skill appears to implement what it claims (it posts a walletAddress to https://api.consortiumai.org using an API key). Before installing or using it: (1) verify the API key provenance — only set a key you obtained directly from Consortium AI and do not reuse high-privilege keys from other services; (2) confirm the correct environment variable name with the skill publisher (metadata omitted the required env var and the provided name TRADING_ANALYSIS_API_KEY looks mismatched), (3) verify the Consortium AI domain and contact info (the SKILL.md points to an X account) to ensure the service is legitimate, (4) review the small script yourself or run it in an isolated environment since it will transmit the wallet address and API key to a remote endpoint, and (5) if you rely on this for production funds or sensitive accounts, request stronger assurances (publisher identity, TLS certs, official docs) before use.
功能分析
Type: OpenClaw Skill Name: consortiumai-create-account Version: 1.0.0 The skill is classified as suspicious due to a potential shell injection vulnerability. The `SKILL.md` file instructs the AI agent to execute `node scripts/create-account.js <WALLET_ADDRESS>`. If the AI agent does not properly sanitize the `WALLET_ADDRESS` argument before passing it to the shell, it could lead to arbitrary command execution. While the `scripts/create-account.js` file itself uses the `walletAddress` safely within a JSON payload, the vulnerability lies in the command's invocation by the agent. No other malicious behaviors like unauthorized data exfiltration or persistence were identified.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, and the bundled script all align: they call https://api.consortiumai.org to create a custodial wallet using an API key. However, the registry metadata lists no required environment variables while SKILL.md and the script require TRADING_ANALYSIS_API_KEY — an inconsistency that should be resolved. Also the env var name (TRADING_ANALYSIS_API_KEY) is oddly named for a custodial-wallet API key, which could indicate mislabeling or reuse of a key intended for a different product.
Instruction Scope
The runtime instructions and bundled script are scoped narrowly: they only require an API key and a wallet address, then POST that address to the documented API endpoint. The instructions do not ask the agent to read other files, system paths, or unrelated environment variables.
Install Mechanism
This is an instruction-only skill with a small included script and no install spec. Nothing is downloaded or installed at runtime beyond running the provided Node script. That minimizes install-time risk.
Credentials
The skill requires a single API key (TRADING_ANALYSIS_API_KEY) which is reasonable for the described API, but: (1) the registry metadata omitted this required env var, (2) the key name is unexpected for a custodial-wallet API and could lead users to mistakenly supply the wrong credential, and (3) creating custodial wallets is a sensitive operation — using a high-privilege or shared API key here would be risky. The skill does not request additional unrelated credentials, which is good.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system configuration, and does not install persistent agents. It runs only when invoked, so persistence/privilege concerns are low.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install consortiumai-create-account
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /consortiumai-create-account 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of Consortium AI Create Account skill. - Enables creation of custodial wallet accounts via Consortium AI API. - Requires and uses a TRADING_ANALYSIS_API_KEY for authentication. - Includes a Node.js script for easy account creation from the command line. - Detailed API reference and setup instructions provided in SKILL.md.
元数据
Slug consortiumai-create-account
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

ConsortiumAI Create Account 是什么?

Create a custodial wallet account on Consortium AI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 918 次。

如何安装 ConsortiumAI Create Account?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install consortiumai-create-account」即可一键安装,无需额外配置。

ConsortiumAI Create Account 是免费的吗?

是的,ConsortiumAI Create Account 完全免费(开源免费),可自由下载、安装和使用。

ConsortiumAI Create Account 支持哪些平台?

ConsortiumAI Create Account 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ConsortiumAI Create Account?

由 Web Crafter 🕸️(@webcraft3r)开发并维护,当前版本 v1.0.0。

💬 留言讨论