Setup Cairo Contracts

Set up a Cairo smart contract project with OpenZeppelin Contracts for Cairo on Starknet. Use when users need to: (1) create a new Scarb/Starknet project, (2)...

This skill appears to do what it says (scaffold a Cairo/Starknet project and add OpenZeppelin Cairo packages), but it directs you to run a remote installer via 'curl | sh' from https://sh.starkup.sh. Executing a shell script fetched directly from the network runs arbitrary code on your machine and is risky. Before running the command (or letting an agent run it for you): - Verify the installer URL is official (check Starkup/Starknet project docs or official repositories). Do not trust an unknown domain without confirmation. - Inspect the installer first (curl the URL and open the script in a text editor) instead of piping it to sh; look for unexpected network calls, credential prompts, or privilege escalations. - Prefer installation methods with signed releases, checksums, or package-manager distributions (e.g., official GitHub releases, distro packages, or instructions from the official docs). If a checksum or signature is available, verify it. - Run installers in an isolated environment (container or VM) if you need to evaluate them first. If you control the environment and confirm the installer is official and safe, the rest of the instructions are reasonable. If you cannot verify the installer origin, avoid executing the curl | sh step.

Type: OpenClaw Skill Name: setup-cairo-contracts Version: 1.0.1 The skill bundle provides standard documentation and instructions for setting up a Cairo/Starknet development environment using OpenZeppelin contracts. While it includes a 'curl | sh' command to install the Starknet toolchain via 'sh.starkup.sh', this is a common pattern for developer tools and aligns with the stated purpose of project scaffolding. The content includes helpful security advice regarding storage collisions and contains no evidence of malicious intent, data exfiltration, or prompt injection.