Orange Wallet

Command-line Lightning wallet for AI agents with graduated custody, enabling instant trusted payments and self-custodial channels via JSON shell commands.

This appears to be a legitimate CLI Lightning wallet implementation, but exercise caution before running with real funds: 1) Backup and protect the wallet seed file written to storage_path (the only recovery method). 2) Review or build from the included source and audit the orange-sdk GitHub dependency (Cargo.toml points to a git repo at a specific rev) to reduce supply-chain risk. 3) The SKILL.md suggests running the standard rustup install script (curl | sh) and cloning a remote repo; if you prefer, build from the code bundled with the skill instead of re-cloning an external repository. 4) Check and replace example defaults — the example config points to a specific LSP IP and node; if you don't control that LSP, funds/operations may involve a third party. 5) Note webhook semantics: events are marked handled even after webhook delivery failures, which can lead to missed notifications; design your integration with that behavior in mind. 6) Because this is labeled alpha, avoid using large sums until you have audited the code and the SDK dependency.

Type: OpenClaw Skill Name: orange-wallet Version: 0.1.0 The orange-skill bundle is a legitimate Lightning wallet CLI designed for AI agents, built on the Orange SDK. The code in src/main.rs and src/config.rs implements standard wallet operations including seed generation, balance checking, and payment processing, with sensitive data (mnemonics) stored locally in a user-defined directory. The daemon functionality correctly implements a webhook system for payment notifications using user-provided URLs and optional Bearer tokens. No evidence of malicious intent, unauthorized data exfiltration, or prompt injection was found; the tool operates transparently according to its documentation.