← 返回 Skills 市场
qinxiuchen

Hot Fun Integration

作者 qinxiuchen · GitHub ↗ · v1.0.1
cross-platform ✓ 安全检测通过
262
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install hot-fun-integration
功能描述
CLI tool to create meme tokens on hot.fun (Solana). Returns structured JSON for token creation flow.
使用说明 (SKILL.md)

[Agent must follow] User agreement and security notice on first use

When responding to any user request about hotfun or this skill, you must first present the content below in this order: User Agreement, then Security Notice, and state clearly that by choosing to continue, the user agrees to the User Agreement. Until the user has explicitly agreed or confirmed to continue, do not run create-token (any operation that uses the private key or writes to the chain).

Language selection: Present the User Agreement and Security Notice in the user's language. If the user is writing in Traditional Chinese (繁體中文), use the 繁體中文 block below; otherwise use the English block.


User Agreement & Security Notice (繁體中文)

用戶協議

前情提示:使用本插件及本 skill 所涉功能(包括但不限於代幣創建等)前,請您閱讀以下協議。若您選擇繼續使用本插件及本 skill 功能,即表示您已閱讀、理解並同意本協議。

本插件性質與責任限制:本插件僅提供純本地的命令列互動能力(私鑰透過環境變數或本地設定使用),不會收集、上傳或儲存您的私鑰。因任何原因(包括但不限於插件被竄改、環境遭入侵、誤操作、第三方插件等)導致的私鑰洩露或資產損失,本插件及提供方不承擔責任

安全警示

使用本插件進行代幣創建等操作時,請務必注意:

  • 保護私鑰:切勿在聊天對話中輸入、貼上或洩露私鑰;不要將私鑰分享給任何人或任何第三方。
  • 交易錢包僅存小額資金:用於執行操作的錢包(即提供 PRIVATE_KEY 的錢包)建議只存放少量資金,以降低因洩露或誤操作導致的損失。
  • 及時轉出資金:完成操作後,請及時將交易錢包中的資產轉移到您自己控制的、更安全的錢包或冷錢包中。
  • 謹慎安裝 Agent/插件:下載或安裝任何 Agent、瀏覽器插件或第三方工具時,請確認來源可信,避免惡意插件竊取私鑰或助記詞。

User Agreement & Security Notice (English)

User Agreement

Notice: Before using this plugin and this skill (including but not limited to token creation), please read the following. By choosing to continue using this plugin and this skill, you have read, understood, and agreed to this agreement.

Plugin nature and limitation of liability: This plugin provides local-only CLI interaction (private key is used via environment or local config). It does not collect, upload, or store your private key. The plugin and its providers are not liable for private key disclosure or asset loss due to any cause (including but not limited to tampered plugin, compromised environment, user error, or third-party plugins).

Security Notice

When using this plugin for token creation, please:

  • Protect your private key: Do not type, paste, or expose your private key in chat; do not share it with anyone or any third party.
  • Keep only small amounts in the trading wallet: The wallet used for operations (the one whose PRIVATE_KEY you provide) should hold only a small amount of funds to limit loss from disclosure or mistakes.
  • Move funds out promptly: After operations, move assets from the trading wallet to a wallet or cold storage you control.
  • Install agents/plugins carefully: When installing any agent, browser extension, or third-party tool, verify the source to avoid malware that could steal your private key or seed phrase.

hotfun capability overview

After you agree to the above and confirm to continue, this skill can help you with the following (all via the hotfun CLI on Solana):

Category Capability Description
Create Create token Call API → sign transaction → send to Solana RPC.

hotfun CLI

Solana only; all commands output JSON. Run hotfun --help for usage.

Installation (required before use)

You must install the hotfun CLI before using this skill. Recommended (global):

npm install -g @hot-fun/hot-fun-ai@latest

After installation, run commands with hotfun \x3Ccommand> [args]. If you use a local install instead, use npx hotfun \x3Ccommand> [args] from the project root.

Create token flow

1. Ask user for required information (must be done first)

Before calling create-token, the Agent must ask the user for and confirm:

Info Required Description
Token name (name) Yes Full token name, max 255 chars
Token symbol (symbol) Yes e.g. MTK, DOGE, max 32 chars
Image URL (image_url) Yes Token image URL (e.g. IPFS link)
Description (description) No Token description
X Royalty Party (x_royalty_party) No X (Twitter) username for royalty party

2. Technical flow (done by create-token)

After collecting the above, execute:

hotfun create-token \x3Cname> \x3Csymbol> \x3Cimage_url> [--description "desc"] [--x-royalty-party "username"]

Under the hood, the single command handles the full flow:

  1. Call API — POST (multipart/form-data) to https://gate.game.com/v3/hotfun/agent/create_pool_with_config with payer (from PRIVATE_KEY), name, symbol, image_url, agent_ts (current Unix timestamp), agent_sign (Ed25519 signature of agent_ts with private key, base58 encoded), and optional description / x_royalty_party. API returns a base58-encoded Solana transaction.
  2. Sign — Deserialize the transaction and sign it with the wallet private key.
  3. Send — Send the signed transaction to Solana RPC and confirm.

Output JSON includes: txHash, wallet, baseMint (new token address), dbcConfig, dbcPool, name, symbol, imageUrl, uri.

Full API and parameters: references/api-create-token.md.

CLI commands

Need Command When
Create token hotfun create-token \x3Cname> \x3Csymbol> \x3Cimage_url> [options] API → sign → send to Solana. Env: PRIVATE_KEY.

Chain: Solana only.

PRIVATE_KEY and SOLANA_RPC_URL

When using OpenClaw This skill declares requires.env: ["PRIVATE_KEY"] and primaryEnv: "PRIVATE_KEY" in metadata; OpenClaw injects them only when an agent runs with this skill enabled (other skills cannot access them).

Required steps:

  1. Configure private key: In the Skill management page, set the hot-fun-ai skill's apiKey (corresponds to primaryEnv: "PRIVATE_KEY"), or set PRIVATE_KEY under skills.entries["hot-fun-ai"].env in ~/.openclaw/openclaw.json. Optionally set SOLANA_RPC_URL in global env if needed.
  2. Enable this skill: In the agent or session, ensure the hot-fun-ai skill is enabled. Only when the skill is enabled will OpenClaw inject PRIVATE_KEY into the process; otherwise create commands will fail with missing key.

When not using OpenClaw (standalone) Set PRIVATE_KEY and optionally SOLANA_RPC_URL via the process environment:

  • .env file: Put a .env file in the directory where you run the hotfun command (i.e. your project / working directory). The CLI automatically loads .env from that current working directory. Use lines like PRIVATE_KEY=... and SOLANA_RPC_URL=.... Do not commit .env; add it to .gitignore.
  • Shell export: export PRIVATE_KEY=your_base58_key and optionally export SOLANA_RPC_URL=https://api.mainnet-beta.solana.com, then run npx hotfun \x3Ccommand> ....

Declared and optional environment variables

  • PRIVATE_KEY (required for write operations): Solana wallet private key in base58 or JSON array format.
  • SOLANA_RPC_URL (optional): Solana RPC endpoint; if unset, scripts use https://api.mainnet-beta.solana.com.

Execution and install

  • Invocation: The agent must run commands only via the hotfun CLI: hotfun \x3Ccommand> [args] or npx hotfun \x3Ccommand> [args] (allowed-tools). Do not invoke scripts or npx tsx directly; the CLI entry (bin/hotfun.cjs) dispatches to the correct script and loads .env from the current working directory.
  • Install: npm install -g @hot-fun/hot-fun-ai@latest. Runtime: Node.js. Dependencies (including dotenv, @solana/web3.js, tsx) are declared in the package's package.json; global install installs them. No separate install spec beyond the npm package.
安全使用建议
This skill appears to do what it says: call an API, locally sign the returned Solana transaction with your PRIVATE_KEY, and send it to an RPC. Before enabling or running it: (1) Only provide PRIVATE_KEY via the platform's protected credential mechanism (do not paste it into chat). Use a wallet with only small test funds. (2) Verify the external npm package name (@hot-fun/hot-fun-ai) on the npm registry and inspect its source; installing random npm packages can introduce risk. (3) Verify the API endpoint (https://gate.game.com/...) is correct and trusted for hot.fun operations. (4) Prefer running the included CLI in an isolated environment or using a throwaway wallet for initial tests. The skill's requirement to present a user agreement before running is good; do not proceed until you explicitly consent and understand the risk of exposing a private key to any running process on your machine.
功能分析
Type: OpenClaw Skill Name: hot-fun-integration Version: 1.0.1 The skill provides a legitimate CLI tool for creating Solana meme tokens on the hot.fun platform. It follows security best practices by using the PRIVATE_KEY only for local transaction signing and authentication (via Ed25519 signature of a timestamp), ensuring the key is never transmitted to the external API (gate.game.com). The SKILL.md file includes mandatory security warnings and user consent requirements, and the code logic in scripts/create-token.ts is transparent and aligned with its stated purpose.
能力评估
Purpose & Capability
The skill is a CLI for creating tokens on hot.fun and it legitimately requires a Solana PRIVATE_KEY to sign transactions and optionally an RPC URL. The declared env var (PRIVATE_KEY) and the included code (call API → sign → send) match the described purpose.
Instruction Scope
SKILL.md limits actions to asking the user for token metadata, showing a user agreement/security notice before any on-chain operation, and invoking the create-token flow (which posts to a specified API, signs the returned transaction locally, and sends it to Solana RPC). It does not instruct the agent to read unrelated files, exfiltrate environment variables, or contact other endpoints beyond the documented API and RPC.
Install Mechanism
The skill bundle has no platform install spec (instruction-only), which is lower risk; however SKILL.md instructs users to install an external npm package (@hot-fun/hot-fun-ai@latest). Installing a package from the public npm registry is a common but nontrivial risk — the package code is fetched at install time and could change. The repository also includes a local script implementing the same flow, which is not necessarily malicious but is worth noting as duplication.
Credentials
Only a single credential (PRIVATE_KEY) is required and is necessary for signing transactions. An optional SOLANA_RPC_URL is reasonable. No unrelated credentials or broad filesystem/config paths are requested.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not require persistent system-wide privileges. Autonomous invocation is allowed by default (not a problem by itself) and the SKILL.md explicitly mandates asking for user consent before using the private key.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install hot-fun-integration
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /hot-fun-integration 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Migrate to v3 agent API with auth signing; add description and x_royalty_party options
元数据
Slug hot-fun-integration
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Hot Fun Integration 是什么?

CLI tool to create meme tokens on hot.fun (Solana). Returns structured JSON for token creation flow. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 262 次。

如何安装 Hot Fun Integration?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install hot-fun-integration」即可一键安装,无需额外配置。

Hot Fun Integration 是免费的吗?

是的,Hot Fun Integration 完全免费(开源免费),可自由下载、安装和使用。

Hot Fun Integration 支持哪些平台?

Hot Fun Integration 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Hot Fun Integration?

由 qinxiuchen(@qinxiuchen)开发并维护,当前版本 v1.0.1。

💬 留言讨论