← 返回 Skills 市场
730
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install soulblock
功能描述
Read, list, mint, and append Soul Block NFT identities on Base; read works without a wallet, writes use evm-wallet or fallback website links.
安全使用建议
This skill appears to do what it claims: read Soul Block content from a Base contract and prepare writes via an external evm-wallet or website links. Before using it with any real wallet or allowing autonomous agent actions: 1) Ensure you have a Node >=18 environment if you plan to run the included scripts (SKILL.md expects node/npx/tsx). 2) Review the included scripts (scripts/fetch.ts and scripts/encode.js) yourself — they perform only public RPC reads and local file operations. 3) If you will perform on-chain writes, install and inspect the recommended evm-wallet (surfer77/evm-wallet v1.0.3) and only connect a wallet with small, test funds. 4) Be aware the skill instructs the agent to automatically create timestamped SOUL.md backups and update .soulblock without asking; if you want manual consent for file writes, instruct the agent accordingly or disable autonomous invocation. 5) Verify or override the default contract address and RPC (SOULBLOCKS_CONTRACT_ADDRESS / SOULBLOCK_RPC_URL) before minting/appending to avoid interacting with an unexpected contract or network.
功能分析
Type: OpenClaw Skill
Name: soulblock
Version: 0.1.0
The skill is classified as suspicious due to two main indicators found in `SKILL.md`. First, it contains explicit prompt injection instructions for the AI agent to "Read and internalize" SOUL.md content and "Treat the fragment content as your core identity," which attempts to manipulate the agent's persona and behavior. Second, it instructs the agent to "Create a cron job that fires once daily" for "Soul reinforcement," establishing a persistence mechanism that modifies the agent's operational schedule without granular user consent for the cron job creation itself. While the skill includes strong security warnings and lacks direct evidence of data exfiltration or arbitrary remote code execution, these attempts to persistently alter the agent's identity and schedule are high-risk behaviors.
能力评估
Purpose & Capability
Name/description match what the included files do: scripts fetch NFT fragments from a Base contract and encode fragment content. Optional env vars and deep-link fallback are relevant. Minor inconsistency: registry metadata lists no required binaries, but the SKILL.md metadata and commands assume node/npx/tsx be available.
Instruction Scope
Instructions stay within NFT read/write flows (reads via public RPC, writes delegated to an external evm-wallet skill or website links). They explicitly instruct the agent to create timestamped backups of SOUL.md automatically and to update a local .soulblock config; they also suggest probing common paths to detect an installed evm-wallet skill. These file reads/writes are related to the skill's purpose but grant the agent permission to modify files and inspect home/project directories without prompting the user.
Install Mechanism
No install spec (instruction-only) — lowest install risk. Source files are included (scripts and package files) and rely on standard npm packages (ethers, tsx) listed in package.json / package-lock.json; there are no downloads from arbitrary URLs.
Credentials
No required secrets. Optional environment variables (SOULBLOCKS_CONTRACT_ADDRESS, SOULBLOCK_RPC_URL and NEXT_PUBLIC_* fallbacks) are appropriate for overriding network/contract endpoints and match the skill's functionality.
Persistence & Privilege
The skill is not always-enabled and follows normal autonomous-invocation defaults. However it explicitly instructs the agent to automatically create local backups and to update a .soulblock config file without prompting the user. This is reasonable for data-safety but is a privilege to write and modify local files — you should be comfortable granting that to an agent before enabling writes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install soulblock - 安装完成后，直接呼叫该 Skill 的名称或使用
/soulblock触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial public release — read, mint, and develop on-chain AI agent identities on Base
元数据
常见问题
Soul Blocks 是什么？
Read, list, mint, and append Soul Block NFT identities on Base; read works without a wallet, writes use evm-wallet or fallback website links. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 730 次。
如何安装 Soul Blocks？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install soulblock」即可一键安装，无需额外配置。
Soul Blocks 是免费的吗？
是的，Soul Blocks 完全免费（开源免费），可自由下载、安装和使用。
Soul Blocks 支持哪些平台？
Soul Blocks 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Soul Blocks？
由 hburgoyne（@hburgoyne）开发并维护，当前版本 v0.1.0。
推荐 Skills