← 返回 Skills 市场
iskysun96

Smoothsend Gasless

作者 iskysun96 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
204
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install smoothsend-gasless
功能描述
How to sponsor gas fees for Aptos dApp users using SmoothSend. Paid commercial service: free on testnet, credit-based on mainnet. Covers 3-line wallet adapte...
安全使用建议
This SKILL.md appears to be a legitimate integration guide for SmoothSend, but note two things before you rely on or install it: (1) the registry metadata does not declare the API key it actually requires — the guide expects NEXT_PUBLIC_SMOOTHSEND_API_KEY or VITE_SMOOTHSEND_API_KEY. Confirm whether that key is meant to be public (client-visible) or private; if it is sensitive, prefer a server-side proxy or a scoped key mechanism. (2) Exposing an API key in client-side env vars can allow anyone to use your SmoothSend credits unless the provider issues client-scoped, rate-limited keys — check SmoothSend docs and dashboard for key scopes, revocation, and billing controls. Additional checks: verify the @smoothsend/sdk package and any CLI tools (npx @smoothsend/mcp) come from the official SmoothSend npm/org, test everything on testnet first (it's free), and set up billing/alerting to detect unexpected credit usage.
功能分析
Type: OpenClaw Skill Name: smoothsend-gasless Version: 1.0.0 The skill bundle provides documentation and code snippets for integrating the SmoothSend SDK to enable gasless transactions on the Aptos blockchain. It follows standard development practices, such as using environment variables for API keys and providing specific error handling for the service's credit system. No evidence of malicious intent, data exfiltration, or prompt injection was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
The SKILL.md content matches the stated purpose (how to sponsor Aptos gas using SmoothSend) and the recommended dependencies (@smoothsend/sdk, Aptos wallet adapter) are appropriate. However, the registry metadata declares no required env vars while the instructions clearly require an API key (NEXT_PUBLIC_SMOOTHSEND_API_KEY or VITE_SMOOTHSEND_API_KEY), which is an inconsistency.
Instruction Scope
Instructions are focused on integrating SmoothSend (provider setup, Script Composer, error handling). They explicitly tell developers to store an API key in env vars and to handle 402 errors. A notable instruction-level risk: the guidance recommends client-prefixed env vars (NEXT_PUBLIC_/VITE_) which will expose the API key to browsers — the doc warns not to expose server-only keys but doesn't clearly explain the security implications or alternatives (server-side proxy, scoped keys). The skill also suggests running an npx tool (npx @smoothsend/mcp) — benign for documentation but not declared in metadata.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That minimizes direct install risk. It references installing npm packages (@smoothsend/sdk and wallet adapter) but does not attempt to fetch arbitrary archives or run installers on behalf of the user.
Credentials
The skill metadata lists no required environment variables, yet the runtime instructions mandate an API key (NEXT_PUBLIC_SMOOTHSEND_API_KEY or VITE_SMOOTHSEND_API_KEY). Requesting an API key is reasonable for this integration, but using NEXT_PUBLIC_/VITE_ implies the key will be shipped to clients; the docs do not justify the key's intended exposure model, nor do they discuss scopes, revocation, or a server-side alternative. This mismatch between declared requirements and instructions is a proportionality and transparency concern.
Persistence & Privilege
The skill does not request persistent installation privileges (always is false), does not modify other skills or system configs, and has no declared config paths. There is no evidence it requests elevated runtime privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install smoothsend-gasless
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /smoothsend-gasless 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of smoothsend-gasless. - Provides a guide to sponsor gas fees for Aptos dApp users using the SmoothSend commercial service. - Supports TypeScript SDK integration; free on testnet, credit-based billing on mainnet. - Features 3-line wallet adapter integration via transactionSubmitter for easy gasless setup. - Includes Script Composer method for stablecoin transfers with fee-in-token, no APT needed. - Documents installation, configuration, error handling, pricing, and common mistakes.
元数据
Slug smoothsend-gasless
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Smoothsend Gasless 是什么?

How to sponsor gas fees for Aptos dApp users using SmoothSend. Paid commercial service: free on testnet, credit-based on mainnet. Covers 3-line wallet adapte... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 204 次。

如何安装 Smoothsend Gasless?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install smoothsend-gasless」即可一键安装,无需额外配置。

Smoothsend Gasless 是免费的吗?

是的,Smoothsend Gasless 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Smoothsend Gasless 支持哪些平台?

Smoothsend Gasless 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Smoothsend Gasless?

由 iskysun96(@iskysun96)开发并维护,当前版本 v1.0.0。

💬 留言讨论