NEAR Protocol CLI installation and setup guide.

Guide for installing, setting up, verifying, and using NEAR Protocol CLI (near-cli-rs) on all platforms, including obtaining the absolute path of the near bi...

This skill is documentation-only and appears coherent for installing and using near-cli-rs. Before running any installer commands (especially curl ... | sh): verify you trust the GitHub release source, prefer downloading the installer and inspecting it instead of piping it directly to sh, check checksums/signatures if available, and run installers in a low-privilege or sandboxed environment when possible. Be careful when using the CLI commands that import or export accounts — those operations involve private keys/seed phrases; never paste seeds into untrusted tooling. If you need higher assurance, install via your OS package manager or cargo/npm when available, or manually review the installer script on the linked GitHub release page.

Type: OpenClaw Skill Name: near-cli-tools Version: 1.0.0 The skill is designed to install and configure the NEAR Protocol CLI, which involves executing commands that interact with the blockchain. It uses the `curl | sh` pattern for installation (e.g., `curl ... | sh` in SKILL.md and README.md), which is an inherent Remote Code Execution (RCE) vulnerability risk, as it executes arbitrary code downloaded from a remote server. While this is a common installation method for many legitimate tools, it represents a significant security flaw if the remote script or its source (GitHub) were compromised. Additionally, the `README.md` lists `near account export-account` as a common command, which could expose sensitive credentials if an agent were prompted to execute it, although the skill does not explicitly instruct the agent to misuse this command. These elements, while not indicative of intentional malice by the skill author, introduce significant security risks for an AI agent and the system it operates on.