← 返回 Skills 市场
372
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install solana-token-distribution
功能描述
For token distribution on Solana 5000x cheaper than SPL (rewards, airdrops, depins, ...). @lightprotocol/compressed-token (TypeScript). Reference examples fo...
安全使用建议
This skill appears to be a legitimate guide for compressed-token airdrops and only requires a Helius RPC key and Node to run the provided TypeScript examples. Before using it: (1) verify the skill's source (follow the GitHub links in the SKILL.md) and test on devnet first; (2) never paste your wallet private key into a chat or untrusted UI — use a secure signing method or hardware wallet; (3) restrict or rotate your Helius API key if you decide to use it, and avoid giving broader credentials than required; (4) if the agent spawns subagents or reads files, confirm the scope (limit to docs/repos) so it doesn't access unrelated local data. If you need higher assurance, request the actual code files from the publisher or run the examples locally in an isolated environment.
功能分析
Type: OpenClaw Skill
Name: solana-token-distribution
Version: 1.0.1
The skill bundle provides legitimate code patterns and documentation for Solana token distribution using TypeScript. The `SKILL.md` explicitly instructs the AI agent to limit file system access to the current project and skill references, and warns against hard-coding private keys, demonstrating a security-conscious design. All network calls are directed to the Solana RPC endpoint (Helius), and there is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`, `eval`), persistence mechanisms, or obfuscation. The required `HELIUS_API_KEY` is declared and handled via environment variables, which is a standard practice.
能力评估
Purpose & Capability
Name/description (compressed-token airdrops) align with the declared requirements: node and HELIUS_API_KEY. The SKILL.md examples call Helius RPC endpoints and @lightprotocol libraries, which matches the stated purpose. Note: the registry lists no homepage and the skill source is 'unknown' in the registry metadata, while SKILL.md contains a GitHub metadata URL — provenance is plausible but not confirmed by the registry.
Instruction Scope
SKILL.md is an instruction-only guide with TypeScript examples for building, batching, and sending compressed-token transactions. The runtime instructions reference creating/signing transactions (requiring a payer key), using process.env.HELIUS_API_KEY (declared), and suggest spawning subagents with Read/Glob/Grep and DeepWiki MCP access when stuck. That subagent guidance could broaden read access if executed by an agent, so scope and data access should be limited to repo/docs only. The instructions do not directly request arbitrary system files, but they do require the user provide/sign with a private key (not declared as an env var).
Install Mechanism
No install spec and no code files to execute were provided by the skill bundle (instruction-only). This is low-risk from an install perspective because nothing is downloaded or written by the skill itself.
Credentials
The single required env var (HELIUS_API_KEY) is appropriate for using Helius RPC endpoints referenced in the examples. However, transaction signing requires a payer secret key; the skill does not declare a wallet secret env var but examples show Keypair.fromSecretKey(/* your key */). Users should not paste private keys into untrusted inputs — providing a signing key is necessary for operation but is sensitive and must be handled out-of-band or via secure signing.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It is user-invocable and allows model invocation (the platform default). There is no install step that modifies system or other skills' configs.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install solana-token-distribution - 安装完成后,直接呼叫该 Skill 的名称或使用
/solana-token-distribution触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Updated Security section to clarify that both HELIUS_API_KEY and a payer keypair are required for mainnet execution; recommended using a secrets manager.
- Added guidance against hard-coding private keys and clarified no need for secrets for read-only or localnet testing.
- Added restriction that file-system read tools must be scoped to the project directory and skill references; do not read outside these paths.
- No functional changes to distribution logic or workflow.
v1.0.0
- Initial release: enables efficient token distribution on Solana using compressed tokens, up to 5000x cheaper than traditional SPL tokens.
- Provides TypeScript examples for airdrops, rewards, DePINs, and custom claim programs.
- Includes cost comparisons, reference implementations (simple claim and distributor), and code for batch processing.
- Documents requirements, dependencies (`HELIUS_API_KEY`, `node`), and security best practices.
- Lists resources, API docs, and tools like Airship for no-code airdrops up to 200K recipients.
元数据
常见问题
solana-token-distribution 是什么?
For token distribution on Solana 5000x cheaper than SPL (rewards, airdrops, depins, ...). @lightprotocol/compressed-token (TypeScript). Reference examples fo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 372 次。
如何安装 solana-token-distribution?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install solana-token-distribution」即可一键安装,无需额外配置。
solana-token-distribution 是免费的吗?
是的,solana-token-distribution 完全免费(开源免费),可自由下载、安装和使用。
solana-token-distribution 支持哪些平台?
solana-token-distribution 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 solana-token-distribution?
由 tilo-14(@tilo-14)开发并维护,当前版本 v1.0.1。
推荐 Skills