← 返回 Skills 市场
vveerrgg

social-value

作者 vveerrgg · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
215
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install social-value
功能描述
Economic intelligence for AI agents — efficient micropayments via Breez SDK (Liquid or Spark)
安全使用建议
This skill will create a wallet from a BIP39 mnemonic and requires you to provide the mnemonic and a Breez API key — whoever gives the mnemonic controls the funds. Before installing or running it: 1) Do not reuse an existing mnemonic that already holds real funds; generate a fresh mnemonic offline if you want to experiment. 2) Inspect the pip package source (PyPI repo or the GitHub repo linked in metadata) and review recent releases and maintainer reputation before installing. 3) Prefer running the installation in an isolated environment or sandbox. 4) Consider using testnet/mainnet flags and a small test amount first. 5) If you must provide secrets as env vars, ensure they are stored securely and not logged; set SOCIAL_VALUE_MAX_BALANCE to a low cap while testing. 6) If you are not comfortable giving control of a mnemonic to a third‑party package, decline to provide the mnemonic and instead use a read-only or escrow approach (if supported).
功能分析
Type: OpenClaw Skill Name: social-value Version: 0.1.0 The skill provides a wallet interface for AI agents using the Breez SDK, which involves handling highly sensitive BIP39 mnemonics and Breez API keys (SKILL.md, metadata.json). While these capabilities are aligned with the stated purpose of enabling micropayments, they constitute 'meaningful high-risk behaviors' as defined in the review criteria. The SKILL.md instructions guide the AI agent to solicit these secrets from the operator and manage financial transactions, which could be exploited if the underlying 'social-value' Python package or the agent's environment is compromised. No explicit evidence of malicious intent or data exfiltration was found in the provided files, but the inherent risk of mnemonic handling warrants a suspicious classification.
能力评估
Purpose & Capability
The skill claims to create and manage a Liquid/Spark wallet from a BIP39 mnemonic and to use the Breez SDK — asking for a mnemonic and Breez API key is coherent with that purpose. However, the registry summary at the top of the package claims 'Required env vars: none' while the included metadata.json and SKILL.md explicitly require BREEZ_API_KEY and SOCIAL_VALUE_MNEMONIC. That inconsistency reduces trust in the packaging/metadata.
Instruction Scope
The SKILL.md instructs the agent to request and store extremely sensitive secrets (a BIP39 mnemonic and Breez API key) and to set them in environment variables. This is within the stated wallet purpose, but environment variables can be captured in logs or leaked; the skill also instructs creation of a permanent wallet (mnemonic = full control of funds). There is no code included for inspection — the runtime behavior depends on an external pip package that will run locally, which increases risk.
Install Mechanism
The skill is instruction-only but declares installation via a pip package (social-value) and also lists an 'uv' install entry; metadata.json lists pip: social-value and a dependency on breez-sdk-liquid. Installing a third-party pip package at runtime can execute arbitrary code. There are no included code files to audit, and the install entries are inconsistent (uv vs pip). This is a moderate-to-high risk installation path unless you audit the package source and releases first.
Credentials
The environment variables required (BREEZ_API_KEY, SOCIAL_VALUE_MNEMONIC) are directly relevant to creating and operating a wallet and so are proportionate to the stated function. However, these are extremely sensitive: the mnemonic grants full control of funds and the Breez API key may enable SDK actions. The skill also suggests setting these as env vars (convenient but potentially insecure).
Persistence & Privilege
The skill does not request 'always: true' and does not declare system-wide config changes. It may create an SDK data directory (SOCIAL_VALUE_WORKING_DIR optional), which is expected for a wallet SDK. There is no evidence it modifies other skills or system-wide settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install social-value
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /social-value 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Security hardening: SecretStr, sanitized exceptions, input validation
元数据
Slug social-value
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

social-value 是什么?

Economic intelligence for AI agents — efficient micropayments via Breez SDK (Liquid or Spark). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 215 次。

如何安装 social-value?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install social-value」即可一键安装,无需额外配置。

social-value 是免费的吗?

是的,social-value 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

social-value 支持哪些平台?

social-value 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 social-value?

由 vveerrgg(@vveerrgg)开发并维护,当前版本 v0.1.0。

💬 留言讨论