← 返回 Skills 市场
soho
作者
Amit Biswas
· GitHub ↗
· v1.0.17
· MIT-0
400
总下载
0
收藏
1
当前安装
4
版本数
在 OpenClaw 中安装
/install soho
功能描述
Initiate payments on the SOHO Pay credit layer using EIP-712 signatures.
安全使用建议
This skill appears to do what it claims, but it operates on a highly sensitive secret (PRIVATE_KEY). Before installing: 1) Only supply a key you control and are willing to automate (preferably a low-value or test key). 2) Verify the hardcoded contract and token addresses are the intended SOHO Pay contracts for your network. 3) Install and run the skill locally (not in an untrusted cloud) if you want to keep the key off remote systems. 4) Review SKILL.md and the scripts yourself or with a trusted reviewer; npm dependencies come from the public registry so follow your usual supply-chain precautions. 5) Confirm how OpenClaw handles autonomous invocation—if you do not want the agent to act without approval, disable autonomous invocation for this skill or keep it user-invocable only.
功能分析
Type: OpenClaw Skill
Name: soho
Version: 1.0.17
The SOHO Pay skill bundle provides a legitimate set of tools for an autonomous agent to interact with the SOHO Pay credit protocol on the Base network. It includes scripts for agent registration, EIP-712 signed payments (scripts/pay.js), debt repayment (scripts/repay.js), and profile status monitoring (scripts/status.js). While it requires a sensitive PRIVATE_KEY environment variable, the code demonstrates local-only signing practices, includes chainId validation to prevent cross-network replay or errors, and contains no evidence of data exfiltration or unauthorized execution.
能力评估
Purpose & Capability
Name, description, skill.json env declaration, SKILL.md, and all scripts align: the code implements pay/status/repay/register workflows for SOHO Pay on Base mainnet and Sepolia. The only sensitive input requested is PRIVATE_KEY, which is appropriate for a signing agent. Hardcoded contract and token addresses are present and documented.
Instruction Scope
Runtime instructions and code only perform EVM reads/writes and local signing. The scripts read PRIVATE_KEY from the environment, call the configured RPC endpoints, sign locally with ethers, and submit transactions to the Creditor/BorrowerManager contracts. They do not call unexpected external endpoints, do not exfiltrate the raw private key, and do not read unrelated system files or env vars.
Install Mechanism
There is no platform install spec (download/extract/brew) in the registry, but the package contains package.json and instructs npm install in SKILL.md. Dependencies are standard (ethers, dotenv) pulled from the public npm registry — this is expected for a Node.js skill but does mean npm packages will be installed at runtime, so normal supply-chain risk considerations apply.
Credentials
Only PRIVATE_KEY is required and is declared as sensitive in skill.json and SKILL.md. That is proportionate to a signing/payment skill. No unrelated credentials or config paths are requested.
Persistence & Privilege
The skill does not request 'always: true' and skill.json marks 'autonomous': false; however the platform registry metadata shows the default model-invocation flags. If the platform allows autonomous invocation, the skill could sign and submit transactions using the provided PRIVATE_KEY without extra human approval — ensure agent invocation settings match your risk tolerance. The skill itself does not modify other skills or system settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install soho - 安装完成后，直接呼叫该 Skill 的名称或使用
/soho触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.17
**Summary: Simplified SOHO Pay agent skill, now using local wallet key for all actions and clearer helper scripts.**
- Refactored skill to use a single local PRIVATE_KEY for signing all authorizations (removed support for remote/abstract wallet signers).
- Added new helper scripts: `register.js`, `repay.js`, and `status.js` for agent registration, credit repayment, and borrower profile/status checks.
- Removed `src/signer/` logic and old `pay.js` in favor of simplified script structure under `scripts/`.
- Updated documentation for easier setup, natural-language mapping, and explicit security warnings about PRIVATE_KEY usage.
- Switched to a plain, default contract set for both Base mainnet and Base Sepolia, with hardcoded addresses and config checks.
v1.0.2
Initial release of the SOHO Pay payment orchestration skill.
- Added metadata and configuration files for the new skill.
- Introduced `src/signer/config.js` for signer configuration management.
- Removed legacy configuration file (`src/config.js`).
- Updated contract addresses for supported networks in documentation.
- No feature or interface changes; this is the first version.
v1.0.1
Soho Pay v1.1.0 Hardened credit-layer payment skill using EIP-712 signatures on Base. SoHo provides credit authorization and just-in-time funding only, all signing is delegated to the user's own wallet signer (MPC/HSM like Turnkey, Privy, or Fireblocks). Includes mainnet safety gating, autonomous invocation blocking, strict address validation (no generated addresses), and full env var declaration with sensitivity flags. Supports Base Sepolia for development and Base Mainnet with explicit confirmation. Manual invocation only requires user confirmation before every transaction.
v1.0.0
- Initial release of the SOHO Pay credit layer payment skill.
- Enables off-chain EIP-712 signature authorization and on-chain execution via the spendWithAuthorization function.
- Accepts natural language commands ("pay <amount> to <merchant>"), supporting both Ethereum addresses and merchant names.
- Includes pre-flight checks for borrower registration and credit limit.
- Integrates with the Base Sepolia testnet using hardcoded contract addresses and assets.
- Requires borrower private key to be set as the borrower-1 environment variable.
元数据
常见问题
soho 是什么？
Initiate payments on the SOHO Pay credit layer using EIP-712 signatures. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 400 次。
如何安装 soho？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install soho」即可一键安装，无需额外配置。
soho 是免费的吗？
是的，soho 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
soho 支持哪些平台？
soho 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 soho？
由 Amit Biswas（@amitbiswas1992）开发并维护，当前版本 v1.0.17。
推荐 Skills