← 返回 Skills 市场
466
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install solana-compression-dev
功能描述
For client and program development on Solana ~160x cheaper and without rent-exemption for per-user state, DePIN registrations, or custom compressed accounts....
安全使用建议
This skill appears coherent for Solana compressed-PDA development, but take standard precautions: only provide an API_KEY for a trusted RPC provider (Helius/Triton) and avoid pointing the skill at a mainnet keypair with significant funds—use a devnet/local keypair when experimenting. Verify the referenced GitHub repositories and the Lightprotocol docs if you need assurance of provenance. Because the skill can run developer CLIs and fetch web resources, run it in an isolated/dev environment if you are unsure, and do not grant unrelated secrets or system access.
功能分析
Type: OpenClaw Skill
Name: solana-compression-dev
Version: 1.0.4
The skill is classified as suspicious due to its requirement to access sensitive user credentials (`~/.config/solana/id.json`) and its broad `allowed-tools` permissions, including `Write` for filesystem modification and `WebFetch` for network access, as detailed in `SKILL.md` and `references/client.md`. While the skill's stated purpose is legitimate Solana development and it includes instructions to limit file access, the inherent capability to read a user's Solana keypair and perform arbitrary file/network operations presents a significant vulnerability risk if the agent were compromised via prompt injection, or if the skill itself were subtly altered to misuse these permissions. There is no clear evidence of intentional malicious exfiltration or backdoor installation in the provided content.
能力评估
Purpose & Capability
Name/description (compressed PDAs, Light System Program, ZK compression) match the required binaries (solana, anchor, cargo, node, light) and the documented need for an RPC API key and a Solana keypair. The declared config path (~/.config/solana/id.json) and API_KEY are appropriate for devnet/mainnet workflows described in the docs.
Instruction Scope
SKILL.md instructs the agent to fetch validity proofs from RPC providers (Helius/Triton), derive addresses, pack accounts, and read the Solana keypair; these actions are within the scope of building & testing compressed PDA programs. The instructions do not direct the agent to read unrelated system files or to exfiltrate data to unexpected endpoints; external network calls are to documented RPC and GitHub resources.
Install Mechanism
This is an instruction-only skill with no install spec or archive downloads. That minimizes disk write execution risk; required binaries are assumed present on PATH and are standard developer tools for Rust/Solana development.
Credentials
The single required env var (API_KEY) is justified (RPC provider key for fetching validity proofs). The required config path is the Solana keypair file, which is needed to sign transactions/tests. No unrelated credentials or numerous secrets are requested.
Persistence & Privilege
always:false and no install hooks are present. The skill does not request persistent system-wide privileges or modifications to other skills. Autonomous invocation is allowed but is the platform default; nothing else increases its privilege.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install solana-compression-dev - 安装完成后,直接呼叫该 Skill 的名称或使用
/solana-compression-dev触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.4
- Updated the description to clarify support for both client and program development using Solana compression.
- No other changes detected in this release.
v1.0.3
- Updated reference repositories section to use direct GitHub links for each example, with added descriptions and organized categories.
- Provided explicit distinctions between Anchor and Native examples and included links to relevant SDKs and clients.
- Improved clarity and navigation for example patterns, client-program flows, and advanced use cases (nullifier, airdrop, ZK).
- No changes to functionality—documentation update only.
v1.0.2
- Updated the skill description for clarity on use cases, program development, and cost savings.
- No functional or code changes were made in this version.
- Documentation and workflow remain unchanged.
v1.0.1
- Clarified required environment variables: API_KEY and Solana keypair path are now explicitly listed for devnet/mainnet usage.
- Improved security section to specify when credentials are needed and where they should be sourced.
- Simplified and made explicit the build/test instructions and subagent workflow for debugging and failure recovery.
- Added a cost comparison table between standard and compressed accounts.
- Improved language for subagent spawning and restricted read scopes for better clarity and safety.
v1.0.0
Initial release of solana-compression: build, manage, and test compressed accounts for Solana programs.
- Enables creation, update, closure, burn, and reinitialization of compressed accounts via manual CPI to the Light System Program (~100x lower cost, no rent-exemption).
- Provides full guidance for per-user state, DePIN registration, and ZK-proof custom state.
- Includes recommended tooling/workflow, code patterns, error recovery, and deep references to client SDKs and example repos.
- No secret handling; all sensitive configuration remains user-side.
- Detailed workflow for troubleshooting, parallel research, and fallback reference search.
元数据
常见问题
solana-compression-dev 是什么?
For client and program development on Solana ~160x cheaper and without rent-exemption for per-user state, DePIN registrations, or custom compressed accounts.... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 466 次。
如何安装 solana-compression-dev?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install solana-compression-dev」即可一键安装,无需额外配置。
solana-compression-dev 是免费的吗?
是的,solana-compression-dev 完全免费(开源免费),可自由下载、安装和使用。
solana-compression-dev 支持哪些平台?
solana-compression-dev 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 solana-compression-dev?
由 tilo-14(@tilo-14)开发并维护,当前版本 v1.0.4。
推荐 Skills