← 返回 Skills 市场
botmechanic

Nexwave Gateway

作者 botmechanic · GitHub ↗ · v1.0.2
cross-platform ⚠ suspicious
1312
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install nexwave-gateway
功能描述
Unified crosschain USDC balance via Circle Gateway + Circle Programmable Wallets. Deposit USDC on any supported chain, check your unified balance, and instantly mint USDC on any destination chain in <500ms — no bridging, no raw private keys.
安全使用建议
This package implements exactly what it says: a testnet demo of Circle Gateway + Circle Programmable (MPC) wallets. However: 1) The skill requires sensitive Circle developer credentials (API key, entity secret, wallet set ID) — these grant the ability to create/sign transactions and should never be uploaded to untrusted systems or used with real/mainnet funds until you fully trust the code and author. 2) The registry metadata omitted the required env vars; that mismatch suggests sloppy packaging — review the SKILL.md and code before running. 3) Confirm the author (nexwave) and owner, and prefer running the setup and scripts in an isolated environment (container or VM) and on testnets first. 4) Inspect the included JS files yourself (they are present) and verify endpoints (Circle Gateway testnet URL, Circle SDK, Arc RPC) are correct. If you are not comfortable with handling API secrets or signing transactions via a third-party service, do not install or supply credentials.
功能分析
Type: OpenClaw Skill Name: nexwave-gateway Version: 1.0.2 The OpenClaw skill `nexwave-gateway` is designed for cross-chain USDC transfers using Circle Gateway and Programmable Wallets. It requires `CIRCLE_API_KEY`, `CIRCLE_ENTITY_SECRET`, and `CIRCLE_WALLET_SET_ID` as environment variables, which are used to authenticate with legitimate Circle APIs (e.g., `gateway-api-testnet.circle.com`). The `setup.sh` script installs standard Node.js dependencies and copies local files, while the JavaScript files interact with Circle's MPC-secured wallets for transaction signing, ensuring raw private keys are not exposed. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in `SKILL.md` or `README.md` that would subvert the agent's intended purpose.
能力评估
ℹ Purpose & Capability
The skill claims to provide unified USDC access via Circle Gateway and Circle Programmable Wallets and the code, SKILL.md, and README all implement that flow (Gateway API client, EIP-712 typed data, Circle MPC wallet SDK). Requesting CIRCLE_API_KEY, CIRCLE_ENTITY_SECRET, and CIRCLE_WALLET_SET_ID is expected for this purpose. However, the registry metadata at the top of the package lists "Required env vars: none" while the SKILL.md and code clearly require those env vars — an inconsistency in the manifest/metadata.
✓ Instruction Scope
Runtime instructions are scoped to the Gateway use-case: run setup.sh, install Node deps, run check-balance.js / deposit.js / transfer.js. The SKILL.md and scripts only reference Circle credentials, Gateway API, and RPC endpoints needed for supported testnets. There are no instructions to read unrelated local files, the shell history, or arbitrary system configuration.
✓ Install Mechanism
There is no remote download of arbitrary archives; setup.sh runs npm install for known packages (viem, dotenv, @circle-fin/developer-controlled-wallets) and copies the included JS files into a gateway-app directory. This is a typical local project setup. Risk is moderate because running setup.sh will write files and install Node packages — but the packages are standard and the script does not fetch code from unknown URLs.
⚠ Credentials
The skill requires developer-level Circle credentials (CIRCLE_API_KEY, CIRCLE_ENTITY_SECRET, CIRCLE_WALLET_SET_ID) which legitimately enable the described behavior but are highly sensitive: they allow creating wallets, signing transactions via Circle's API, and moving funds. The requirement is proportionate to the functionality, but because the author/source is unverified and the package metadata omitted these env vars, users should treat the credentials as high-risk and avoid using production/mainnet funds without full trust and review. setup.sh also creates a local .env template — ensure it is stored securely.
✓ Persistence & Privilege
The skill does not request always:true, does not modify other skills, and won't be force-included. It copies files into a local gateway-app directory and creates a .env template when you run setup.sh — expected for a local demo app. There is no evidence it alters global agent settings or other skills' configurations.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install nexwave-gateway
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /nexwave-gateway 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
**Circle Programmable Wallets integration and safer agent usage** - Added integration with Circle Programmable Wallets (no raw private keys required). - Added dependency on the `circle-wallet` skill (`eltontay/circle-wallet`). - Updated environment variables: now requires `CIRCLE_API_KEY`, `CIRCLE_ENTITY_SECRET`, and `CIRCLE_WALLET_SET_ID`. - Introduced a new `circle-wallet-client.js` file for wallet interactions. - Documentation updated to reflect Circle MPC wallet use, removing the need for direct private keys and improving security for agent operations.
v1.0.1
nexwave-gateway 1.0.1 Changelog - No file or documentation changes detected in this version.
v1.0.0
nexwave-gateway 1.0.0 - Initial release providing unified crosschain USDC access via Circle Gateway. - Instantly deposit USDC on any supported testnet chain and mint on any other in under 500ms—no bridges, pools, or delays. - Includes tools to check balances, deposit, and transfer USDC across Ethereum Sepolia, Avalanche Fuji, and Base Sepolia. - Setup instructions, troubleshooting, and flow diagrams included for seamless OpenClaw Agent integration. - Support for early access fee rates and chain-specific guidance (testnet only).
元数据
Slug nexwave-gateway
版本 1.0.2
许可证 —
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Nexwave Gateway 是什么？

Unified crosschain USDC balance via Circle Gateway + Circle Programmable Wallets. Deposit USDC on any supported chain, check your unified balance, and instantly mint USDC on any destination chain in <500ms — no bridging, no raw private keys. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1312 次。

如何安装 Nexwave Gateway？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install nexwave-gateway」即可一键安装，无需额外配置。

Nexwave Gateway 是免费的吗？

是的，Nexwave Gateway 完全免费（开源免费），可自由下载、安装和使用。

Nexwave Gateway 支持哪些平台？

Nexwave Gateway 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Nexwave Gateway？

由 botmechanic（@botmechanic）开发并维护，当前版本 v1.0.2。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论