← 返回 Skills 市场
274
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install nla-fulfill
功能描述
Fulfill an existing NLA escrow and collect tokens. Use when the user wants to submit fulfillment text for an on-chain escrow, check arbitration results, and...
安全使用建议
This skill appears to do what it claims (help submit fulfillments and collect escrowed tokens), but the published metadata omits two important facts the SKILL.md makes explicit: you need the 'nla' CLI (npm package) and a private key/wallet with ETH for gas. Before installing or invoking this skill: 1) Do not expose your main/private production key — prefer a separate account with minimal funds, a hardware wallet, or manual signing. 2) Verify the 'nla' npm package and its repository/author before installing. 3) Avoid setting PRIVATE_KEY as a global env var that the agent can access; instead prefer manual --private-key entry or wallet prompt where possible. 4) If you permit the agent to run commands autonomously, be aware it could sign and broadcast transactions if it has access to the key. If you need more assurance, ask the skill author to update the registry metadata to declare required binaries and env vars, and to provide the npm package repository link.
功能分析
Type: OpenClaw Skill
Name: nla-fulfill
Version: 1.0.0
The skill bundle facilitates on-chain escrow fulfillment using the 'nla' CLI, requiring high-risk capabilities such as shell execution (restricted to the nla namespace) and the handling of sensitive Ethereum private keys. While the instructions in SKILL.md are consistent with the stated purpose and lack clear malicious intent or prompt injection, the inherent risk associated with managing financial credentials and executing shell commands meets the threshold for a suspicious classification under the provided criteria.
能力评估
Purpose & Capability
The SKILL.md describes exactly the expected actions for fulfilling an NLA escrow (checking status, submitting fulfillments, monitoring arbitration, collecting tokens). However the registry metadata does not declare the required 'nla' CLI or any environment variables even though the instructions explicitly require npm install -g nla and a private key/wallet. This mismatch is a transparency/consistency issue.
Instruction Scope
Runtime instructions tell the agent/user to submit on-chain transactions (commit-reveal flow) and to supply a private key (via PRIVATE_KEY env var, --private-key, or via 'nla wallet:set'). The SKILL.md reads/uses an environment variable and invokes a CLI — actions that can sign and broadcast transactions. The instructions do not ask the agent to read unrelated system files, but they do assume access to a sensitive secret (private key) that is not declared in the skill metadata.
Install Mechanism
There is no install spec in the registry (instruction-only skill), but SKILL.md requires the user to install 'nla' via npm (npm install -g nla). Installing a global npm package is a normal approach for CLI tools but carries moderate risk: the package source should be verified (author, package name, registry, and repository). The skill itself will not perform the install, so the responsibility falls to the user.
Credentials
The task legitimately requires a private key and ETH for gas, but the skill does not declare required env vars / primary credential in the metadata. Requiring a PRIVATE_KEY (or a wallet configured in the CLI) is sensitive and should be explicit. The absence of declared credentials in the registry metadata is an inconsistency that reduces transparency about what secrets the skill needs or may use.
Persistence & Privilege
The skill is not always-enabled and does not request persistent privileged platform hooks. However, because it instructs use of a signing key and allows CLI invocation, if the agent is granted the key or the CLI is pre-authorized the agent could autonomously sign and send transactions. Autonomous invocation is the platform default; combine that with private-key access only if you trust the agent behavior.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nla-fulfill - 安装完成后，直接呼叫该 Skill 的名称或使用
/nla-fulfill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
nla-fulfill v1.0.0 — Initial release
- Provides step-by-step instructions for fulfilling an on-chain NLA escrow using the nla CLI.
- Covers the entire fulfill-arbitrate-collect process, including crafting fulfillment text, submitting it, monitoring arbitration, and collecting tokens if approved.
- Outlines key requirements, command syntax, and prerequisite setup for users.
- Includes practical examples and highlights important details of the commit-reveal flow and arbitration outcomes.
元数据
常见问题
Nla Fulfill 是什么？
Fulfill an existing NLA escrow and collect tokens. Use when the user wants to submit fulfillment text for an on-chain escrow, check arbitration results, and... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 274 次。
如何安装 Nla Fulfill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nla-fulfill」即可一键安装，无需额外配置。
Nla Fulfill 是免费的吗？
是的，Nla Fulfill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Nla Fulfill 支持哪些平台？
Nla Fulfill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nla Fulfill？
由 疒奀（@mlegls）开发并维护，当前版本 v1.0.0。
推荐 Skills