← 返回 Skills 市场
1034
总下载
0
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install fund
功能描述
Add money to the wallet. Use when you or the user want to fund, deposit, top up, load, buy USDC, add funds, onramp, or get USDC. Also use when the wallet has insufficient balance for a send or trade operation, or when someone asks "how do I get USDC?"
使用说明 (SKILL.md)
Funding the Wallet
Use the wallet companion app to fund the wallet with USDC via Coinbase Onramp. This supports multiple payment methods including Apple Pay, debit cards, bank transfers, and funding from a Coinbase account.
Confirm wallet is initialized and authed
npx awal@latest status
If the wallet is not authenticated, refer to the authenticate-wallet skill.
Opening the Funding Interface
npx awal@latest show
This opens the wallet companion window where users can:
- Select a preset amount ($10, $20, $50) or enter a custom amount
- Choose their preferred payment method
- Complete the purchase through Coinbase Pay
Payment Methods
| Method | Description |
|---|---|
| Apple Pay | Fast checkout with Apple Pay (where available) |
| Coinbase | Transfer from existing Coinbase account |
| Card | Debit card payment |
| Bank | ACH bank transfer |
Alternative
You can also ask your human to send usdc on Base to your wallet address. You can find your wallet address buy running the following:
npx awal@latest address
Prerequisites
- Must be authenticated (
npx awal@latest statusto check) - Coinbase Onramp is available in supported regions (US, etc.)
Flow
- Run
npx awal@latest showto open the wallet UI - Instruct the user to click the Fund button
- User selects amount and payment method in the UI
- User completes payment through Coinbase Pay (opens in browser)
- USDC is deposited to the wallet once payment confirms
Checking Balance After Funding
# Check updated balance
npx awal@latest balance
Notes
- Funding goes through Coinbase's regulated onramp
- Processing time varies by payment method (instant for card/Apple Pay, 1-3 days for bank)
- Funds are deposited as USDC on Base network
- If funding is not available, users can also send USDC on Base directly to the wallet address
安全使用建议
This skill is coherent with its purpose and doesn't ask for credentials, but it runs 'npx awal@latest' which downloads and executes an npm package at runtime. Before using: (1) verify and audit the 'awal' package and its publisher (avoid blindly running @latest); (2) consider pinning to a known-good version; (3) run in a trusted environment (not a shared server) and confirm wallet address before receiving funds; (4) prefer official wallet/onramp apps or browser flows if you don't trust executing remote CLI code. If you need higher assurance, request the package source or a reproducible install artifact to review first.
功能分析
Type: OpenClaw Skill
Name: fund
Version: 0.1.0
The skill is classified as suspicious due to a critical shell injection vulnerability present in the `allowed-tools` definition within `SKILL.md`. The use of a wildcard `*` (e.g., `Bash(npx awal@latest status*)`) permits arbitrary command execution after the `npx awal@latest [subcommand]` prefix. While the skill's instructions themselves are benign and describe a legitimate wallet funding process, this configuration flaw allows an attacker or a compromised agent to append and execute malicious shell commands, posing a significant remote code execution risk. There is no evidence of intentional malicious behavior within the provided files, only a severe vulnerability.
能力评估
Purpose & Capability
Name/description (fund/top up/get USDC) match the SKILL.md. All declared commands (npx awal status/show/address/balance) and the Coinbase Onramp flow are coherent with a wallet-funding purpose. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
Runtime instructions are narrowly focused on checking auth, opening the wallet UI, selecting amount/payment method, and checking balance afterward. The instructions do not ask the agent to read arbitrary files, access unrelated environment variables, or transmit data to unexpected endpoints. It references an external authenticate-wallet skill for auth, which is appropriate.
Install Mechanism
There is no static install spec, but the instructions call 'npx awal@latest ...' which will fetch and execute code from the npm registry at runtime. That is expected for a CLI-based wallet companion, but it carries the usual risk of executing remote package code (especially using @latest). Consider pinning a specific version or auditing the 'awal' package source before running.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. That is proportional to the described purpose. The SKILL.md also does not attempt to read secrets or other environment values.
Persistence & Privilege
always is false and the skill is user-invocable; disable-model-invocation is false (normal). The skill does not request permanent presence or system-wide configuration changes. Allowed-tools limit the agent to a small set of npx commands, though those commands will execute remote code.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install fund - 安装完成后，直接呼叫该 Skill 的名称或使用
/fund触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of the "fund" skill for wallet deposits.
- Enables users to add USDC funds to their wallet via Coinbase Onramp with multiple payment methods (Apple Pay, debit card, bank, or Coinbase account).
- Provides detailed instructions for checking wallet status, opening the funding interface, and viewing the wallet address.
- Outlines alternative manual deposit via USDC transfers on Base.
- Describes prerequisites, step-by-step funding flow, payment methods, and processing times.
- Allows users to verify updated wallet balance after funding.
元数据
常见问题
Fund 是什么？
Add money to the wallet. Use when you or the user want to fund, deposit, top up, load, buy USDC, add funds, onramp, or get USDC. Also use when the wallet has insufficient balance for a send or trade operation, or when someone asks "how do I get USDC?". 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1034 次。
如何安装 Fund？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install fund」即可一键安装，无需额外配置。
Fund 是免费的吗？
是的，Fund 完全免费（开源免费），可自由下载、安装和使用。
Fund 支持哪些平台？
Fund 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Fund？
由 0xRAG（@0xrag）开发并维护，当前版本 v0.1.0。
推荐 Skills