Rhaios Staging

Interact with the Rhaios staging REST API for yield operations. Discover -> prepare -> setup-if-needed -> sign -> execute flow with pluggable signer backend....

This skill appears to do exactly what it says: interact with the Rhaios staging API and sign transactions using Privy or a local private key. Before installing, confirm you want code to run that can sign and (when not in dryRun) broadcast transactions. Do not paste your private key or Privy master secrets into chat — keep them in your environment or secret manager. If you plan to use Privy, ensure PRIVY_APP_ID/PRIVY_APP_SECRET come from a trusted Privy skill/provider and that PRIVY_WALLET_ID is ownerless as required. Because this runs against a staging URL, prefer running in a controlled/test environment and review the code if you need higher assurance.

Type: OpenClaw Skill Name: rhaios-staging Version: 0.1.4 The rhaios-staging skill bundle is a legitimate DeFi integration for interacting with the Rhaios yield API. It facilitates vault discovery, transaction preparation, and signing using either local private keys or the Privy SDK. The code follows security best practices by hardcoding the API endpoint (api.staging.rhaios.com) to prevent redirection, implementing robust preflight checks (gas caps, max deposit amounts), and providing explicit instructions in SKILL.md to prevent the AI agent from leaking sensitive credentials. No evidence of data exfiltration, malicious execution, or prompt injection was found.