← 返回 Skills 市场

🔌

Goodwallet Alpha

Name: Goodwallet Alpha
Author: gooddollar

作者 GoodDollar · GitHub ↗ · v0.5.7 · MIT-0

cross-platform ✓ 安全检测通过

108

总下载

当前安装

版本数

在 OpenClaw 中安装

/install goodwallet-alpha

功能描述

Crypto wallet for sending, swapping, trading perps, betting on Polymarket, earning DeFi yield, and signing across EVM, Solana, Bitcoin, Doge, and XRP. Use wh...

使用说明 (SKILL.md)

Goodwallet

Crypto wallet CLI. Run goodwallet --help for the latest commands, flags, chains, and usage.

Setup

This skill assumes the goodwallet CLI is installed globally and available in PATH. If not, install it via npm: Do NOT use npx. Always use the globally installed binary.

Update

Before running any other command, check for updates:

goodwallet update — check for a new version.
If outdated, run goodwallet update --install before proceeding.

Rules

Summarize outcomes in plain language; don't dump raw CLI output unless asked.
Never fabricate values. Only report what the CLI returns.
Read before write: inspect balances/quotes/positions before proposing any state-changing action.
Confirm before executing any command that moves funds or creates exposure: send, swap --execute, trade --deposit/--withdraw/--market, bet --deposit/--withdraw/--market, earn --deposit/--withdraw, and every sign command.
Don't reveal internal wallet details unless the user asks.

Auth

goodwallet auth — show the returned URL to the user.
goodwallet auth --pair — run immediately; polls until the browser flow completes.
goodwallet auth --logout — disconnect.

Signing Safety

All credentials and MPC key shares are stored locally at ~/.config/goodwallet/. No full private key ever exists — only a single MPC key share is stored on device. Signing uses 2-party MPC with a remote co-signer at sign.goodwallet.dev (operated by GoodDollar). The agent API at agent.goodwallet.dev issues signing room UUIDs and enforces transaction-policy checks (token allowlists, spend limits, malicious-contract detection) before co-signing, so most harmful payloads are rejected server-side. Both services communicate over HTTPS/WSS. Still, confirm with the user before running any sign command so they understand what they're approving.

Error Recovery

Auth timeout → restart auth + auth --pair.
Insufficient funds → suggest checking balances or reducing amount.
No swap route → suggest different token, amount, or chain.
Any other failure → report the error plainly, don't retry automatically.

安全使用建议

This skill appears coherent for controlling a CLI crypto wallet, but take precautions before installing or using it: 1) Verify the npm package 'goodwallet' publisher, version, and source (compare with the GitHub repo and official homepage) to avoid a malicious package. 2) Consider installing in an isolated environment (container or dedicated machine) until you trust it. 3) Review the contents of ~/.config/goodwallet/ after auth and understand that an MPC co-signer (sign.goodwallet.dev) participates in signing — verify you trust that operator and the agent.goodwallet.dev policy enforcement. 4) Never paste or share seed phrases/private keys; use the provided browser-oauth flow. 5) Confirm every state-changing action before executing, and prefer small test transactions when first using the wallet. If you need higher assurance, ask the publisher for package checksums/signing or inspect the npm package source before installing.

功能分析

Type: OpenClaw Skill Name: goodwallet-alpha Version: 0.5.7 The goodwallet skill provides a CLI interface for a multi-chain crypto wallet using Multi-Party Computation (MPC) to secure transactions. The SKILL.md instructions include strong safety guardrails, requiring the AI agent to confirm all state-changing actions (e.g., sending funds, swapping, or signing) with the user. The architecture uses a local key share and a remote co-signer (sign.goodwallet.dev), which is a standard security practice, and the skill documentation transparently lists its data storage paths and external dependencies.

能力标签

cryptorequires-walletrequires-oauth-tokenrequires-sensitive-credentials

能力评估

✓ Purpose & Capability

Name/description describe a CLI crypto wallet. The skill only requires the node runtime and installs an npm 'goodwallet' CLI binary — which is proportional and expected for a CLI wallet. Declared external services (sign.goodwallet.dev, agent.goodwallet.dev) align with the MPC-signing description.

✓ Instruction Scope

SKILL.md instructs the agent to call the goodwallet CLI, perform interactive browser auth, check balances before state-changing ops, and confirm with the user before signing or sending funds. It does not instruct reading unrelated files or exfiltrating data. The instructions explicitly avoid fabricating values and limit raw output.

ℹ Install Mechanism

Install is via the npm package 'goodwallet' (global binary). npm installs can run arbitrary install scripts and are moderate risk but are appropriate for a CLI distributed via npm. The skill warns against using npx and expects a global install; this is unusual but not inherently malicious. Verify package publisher and version before installing.

✓ Credentials

The skill does not request environment variables or unrelated credentials. It documents a local config path (~/.config/goodwallet/) holding encrypted MPC shares and auth tokens; storing such data locally is expected for a wallet CLI. Auth is via interactive browser-oauth rather than requiring secret env vars.

✓ Persistence & Privilege

always is false and the skill is user-invocable. It does install a global CLI binary when user runs install, which writes to disk — expected for a CLI. The skill does not request blanket persistent privileges or attempt to modify other skills or system-wide agent settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install goodwallet-alpha
安装完成后，直接呼叫该 Skill 的名称或使用 /goodwallet-alpha 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.5.7

- Removed the version field from the skill metadata. - Added a new Setup section clarifying that goodwallet must be installed globally and not with npx. - No changes to commands, features, or core behavior.

v0.5.6

Version 0.5.6 of goodwallet-alpha - Updated version from 0.5.5 to 1.5.5 in the skill metadata. - Added "homepage" link in the metadata. - Moved the install instructions out from the "requires" object into a new top-level "install" array in the metadata. - No functional or rule changes detected.

v0.5.5

- Downgraded skill version from 1.5.5 to 0.5.5 to align with alpha release. - Updated installer metadata: renamed install dependency from "goodwallet" to "node" and adjusted structure. - Removed the "update" key from the install instructions in metadata. - Clarified storage path for credentials in the "Signing Safety" section by specifying `~/.config/goodwallet/`.

v1.0.1

goodwallet-alpha 1.0.1 - Updated metadata: The "install" field under "requires" now specifies "kind": "node" instead of "npm". - Minor adjustment in documentation: Removed explicit path reference for MPC key storage under "Signing Safety" (now states credentials are stored locally). - No logic or behavioral changes; only metadata and documentation updated.

v1.0.0

Initial release of goodwallet-alpha — a multi-chain crypto wallet CLI for sending, swapping, trading, and signing. - Supports EVM, Solana, Bitcoin, Doge, and XRP chains. - Allows sending tokens, swaps, Perp trading, Polymarket betting, earning yield, and secure transaction signing. - Uses browser-OAuth authentication with no API key required; no full private key stored locally (MPC key shares only). - Built-in safety policies: always read balances/quotes before actions and confirm with user before executing transactions. - Provides clear error recovery steps and avoids revealing sensitive wallet details by default.

元数据

Slug goodwallet-alpha

版本 0.5.7

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 5

常见问题