← 返回 Skills 市场
367
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install rwagenthub2
功能描述
Call 32 real-world APIs — flights, hotels, weather, crypto prices, DeFi yields, stock quotes, web search, geocoding, IP reputation, blockchain data, code exe...
安全使用建议
This skill will install a third‑party npm SDK into your agent's workspace and requires you to store a raw Base wallet private key in OpenClaw config so it can sign micropayments. Before installing: 1) Consider creating a dedicated wallet with only the small USDC balance you plan to spend and never use your main key; 2) Inspect the rwagenthub-sdk package source (npm page / GitHub) and its dependencies before allowing installs; 3) Avoid pasting long‑term private keys into agent config — prefer an ephemeral key, a signing service, or hardware signer if supported; 4) Run the skill in an isolated environment (sandbox or separate machine) until you trust the SDK; 5) Verify the gateway URL and operator (the homepage is on railway.app) and ask the publisher for an explicit security/privacy statement and the SDK source repo. If you cannot audit the SDK or are uncomfortable storing a raw private key, do not install or use this skill.
功能分析
Type: OpenClaw Skill
Name: rwagenthub2
Version: 1.0.0
The skill requires a wallet private key (MCP_WALLET_PRIVATE_KEY) to facilitate pay-per-call API access via the x402 protocol on the Base network. While the documentation includes security warnings and claims the key is only used for local signing, the requirement of a raw private key combined with the execution of an external, unverified SDK (rwagenthub-sdk) poses a high risk of credential theft. Additionally, the skill interacts with a third-party gateway (agents-production-73c1.up.railway.app) and provides high-risk capabilities like remote code execution and email sending.
能力评估
Purpose & Capability
The skill claims to provide paid access to many APIs and requires Node/npm plus a Base wallet private key to sign micropayments — these requirements are broadly consistent with its stated payment-based gateway purpose. Minor inconsistency: the registry metadata showed no primary credential while the SKILL.md metadata declares MCP_WALLET_PRIVATE_KEY as the primary credential.
Instruction Scope
Runtime instructions tell the agent to install a third‑party npm package into the skill workspace if missing, write a temporary script to /tmp, and execute it with node; they also instruct the user to store a raw private key in OpenClaw config. These steps grant the skill the ability to run arbitrary JS code (from the SDK) and persist a sensitive secret.
Install Mechanism
There is no registry install spec, but SKILL.md instructs automatic npm install --prefix ... rwagenthub-sdk. Fetching and executing code from the public npm registry at runtime is a moderate risk (expected for SDK usage but potentially dangerous if the package or its transitive deps are malicious or compromised).
Credentials
The only required env var is MCP_WALLET_PRIVATE_KEY, which is logically required for signing payments — but a raw private key is highly sensitive. The skill advises storing it in openclaw config, which persists the secret. The SKILL.md claims the key 'never leaves your device' but this cannot be verified from the instructions alone.
Persistence & Privilege
always is false and the skill does not request elevated system privileges. However, it instructs storing a private key in agent configuration (persistent) and running npm installs and temporary scripts, so it gains persistent access to a sensitive secret and runtime execution capability within the agent environment.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install rwagenthub2 - 安装完成后，直接呼叫该 Skill 的名称或使用
/rwagenthub2触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
AgentHub v1.0.0 — Initial release
- Provides a unified gateway to 32 real-world APIs (flights, hotels, weather, finance, web search, code exec, email, and more).
- Pay per API call in USDC on Base via x402 protocol (gasless micropayments).
- Requires Node.js 20+, a dedicated Base wallet, and the `MCP_WALLET_PRIVATE_KEY` environment variable.
- Includes installation, wallet setup, and call instructions.
- Features extensive API documentation with sample calls, pricing, and usage notes for each endpoint.
元数据
常见问题
AgentHub - 32 AI APIs via x402 是什么？
Call 32 real-world APIs — flights, hotels, weather, crypto prices, DeFi yields, stock quotes, web search, geocoding, IP reputation, blockchain data, code exe... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 367 次。
如何安装 AgentHub - 32 AI APIs via x402？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install rwagenthub2」即可一键安装，无需额外配置。
AgentHub - 32 AI APIs via x402 是免费的吗？
是的，AgentHub - 32 AI APIs via x402 完全免费（开源免费），可自由下载、安装和使用。
AgentHub - 32 AI APIs via x402 支持哪些平台？
AgentHub - 32 AI APIs via x402 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 AgentHub - 32 AI APIs via x402？
由 Marcelo（@marcelo-rowship）开发并维护，当前版本 v1.0.0。
推荐 Skills