Monad Wordle Skill

Play a 5-letter Wordle game on the Monad blockchain using $WORDLE tokens. Start games, submit guesses, and retrieve game state via HTTP API.

This skill will need a wallet private key and will perform on‑chain purchases and approvals that spend real funds, but the registry metadata doesn't declare any required credentials — a mismatch that could expose your keys or money if you provision them blindly. Before installing: (1) Do NOT provide your main private key as an env var to unreviewed skills. Use a separate wallet with minimal funds or an account specifically for testing. (2) Verify the contract addresses and ABI links (the skill points to a GitHub ABI and specific addresses) and inspect the smart contract source yourself or on a block explorer. (3) Confirm the external API host (https://wordle.nadnation.xyz) is legitimate and review its privacy/security practices. (4) Prefer signing transactions with a hardware wallet or WalletConnect flow rather than injecting PRIVATE_KEY into environment variables. (5) Ask the publisher to update the skill metadata to declare required env vars (e.g., PRIVATE_KEY) and to provide explicit safety/consent steps; request code or a manifest so you can review exactly what actions the agent will take. If you cannot verify these points, treat the skill as risky and avoid supplying signing credentials.

Type: OpenClaw Skill Name: monad-wordle-game Version: 1.0.0 The skill is classified as suspicious due to its high-risk operational requirements and explicit instructions to the AI agent. It requires the agent to access a private key from `process.env.PRIVATE_KEY` to sign blockchain transactions, which is a significant security vulnerability if the agent's environment is not perfectly secured. Furthermore, the `SKILL.md` file contains direct instructions for the agent to perform financial transactions (buying $WORDLE tokens on `nad.fun`) and interact with external APIs (`https://wordle.nadnation.xyz`) to initiate and play games, involving real cryptocurrency. While these actions align with the stated purpose of playing a blockchain-based game, the direct handling of sensitive cryptographic material and execution of financial transactions based on markdown instructions represents a substantial risk without clear malicious intent.