← 返回 Skills 市场
Stellar Agentic Wallet
作者
Shawn Muggle
· GitHub ↗
· v1.7.0
· MIT-0
163
总下载
1
收藏
0
当前安装
12
版本数
在 OpenClaw 中安装
/install stellar-agentic-wallet
功能描述
A Stellar USDC wallet skill for AI agents. Pay for 402-gated APIs via MPP Router or x402 facilitators, check balances, manage USDC trustlines, swap XLM→USDC...
安全使用建议
This appears to be a legitimate Stellar wallet skill, but it controls a signing key so treat it like money: (1) Use a dedicated hot wallet with a small balance, not your main account. (2) Generate and keep the secret in the recommended file (.stellar-secret with mode 600); avoid pasting secrets into UIs. (3) Run on testnet first (pass --network testnet) to confirm flows. (4) Be cautious with pay-per-call: the skill will pay any 402 endpoint you point it at unless you pass --expect-pay-to/--expect-amount to verify recipient and price. If you accept the autopay ceiling option, the skill will write a comment into your secret file and will silently sign payments at-or-below that ceiling — only enable this if you trust the calling flow. (5) Review the included scripts (especially scripts/src/secret.ts and pay-per-call/send-payment code) yourself or verify the upstream repository before using with real funds; note the SKILL.md includes a repository/homepage reference while the registry metadata listed 'source: unknown' — consider checking that repo for release history. (6) If you need the agent to operate autonomously, accept that it can propose payments; rely on the explicit confirmation gates and use expect-* flags to mitigate redirect/exfiltration risk.
功能分析
Type: OpenClaw Skill
Name: stellar-agentic-wallet
Version: 1.7.0
The skill bundle is a well-architected Stellar USDC wallet for AI agents with robust security controls. It implements several defensive measures, including a runtime redactor to prevent private key leakage to stdout/stderr (scripts/src/secret.ts), file-based secret storage with strict mode 600 permissions (scripts/generate-keypair.ts), and mandatory human-in-the-loop confirmation gates for mainnet transactions. The payment engine (scripts/src/pay-engine.ts) includes explicit validation logic to cross-check 402 payment challenges against service catalog metadata, protecting against fund redirection or price manipulation by compromised endpoints. All network activity is restricted to documented Stellar nodes and legitimate payment facilitators (mpprouter.dev and rozo.ai).
能力标签
能力评估
Purpose & Capability
Name/description (wallet, trustlines, swaps, bridge, pay-per-call) match the included scripts and listed network endpoints (Horizon, Soroban RPC, MPP Router, Rozo). Declared npm deps (@stellar/stellar-sdk, mppx, tsx) are appropriate for the Node-based Stellar functionality.
Instruction Scope
Runtime docs and scripts stay on-topic (loading a secret file or env fallback, checking balances, adding trustlines, swapping, creating Rozo intents). Important behaviors to notice: the code will fall back to legacy env keys if present, audits .gitignore, and can write an autopay-ceiling comment into the secret file to enable silent payments below that ceiling — those file reads/writes are within the wallet's purpose but are noteworthy security-affecting actions. The skill can pay any 402 URL you point it at unless you use the --expect-* protections; the README explicitly warns about this.
Install Mechanism
No install spec is provided (instruction-only install), and the package.json lists standard npm dependencies from the registry. There are no downloads from untrusted servers or embedded installers in the manifest.
Credentials
The skill does not request unrelated environment variables or cloud credentials. Secrets are handled via a local file (.stellar-secret) by design; the code documents this and validates format. It also recognizes legacy env vars as a fallback, which is reasonable but should be understood by installers.
Persistence & Privilege
always:false and agent-autonomy defaults are normal. The skill will persist an 'autopay-ceiling' as a comment inside the user's secret file if the user opts in, enabling future silent signing under that ceiling (logged to stderr). The skill does not appear to modify other skills or global agent config.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install stellar-agentic-wallet - 安装完成后，直接呼叫该 Skill 的名称或使用
/stellar-agentic-wallet触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.7.0
stellar-agentic-wallet v1.6.1 changelog
- Removed the redundant or obsolete file `prepare.mjs` from the codebase.
- No changes to functionality or runtime dependencies.
v1.6.0
**Summary:**
Adds user-configurable autopay ceiling for pay-per-call, tightening mainnet spending protections.
- Introduced per-wallet autopay ceiling for mainnet pay-per-call: prompts once, then auto-approves payments ≤ ceiling (logged for audit).
- Ceiling stored as a comment in the secret file; easily revocable by deleting the line.
- `send-payment` and `bridge` always require confirmation on mainnet, no automatic signing.
- Added `--expect-pay-to`, `--expect-amount`, `--expect-asset` flags to pay-per-call for enhanced 402 payment safety.
- Documentation updated to reflect new autopay handling and security best practices.
v1.1.10
Version 1.1.10 → 1.5.0
- Updated skill metadata version to 1.5.0.
- No code or functional changes detected.
- SKILL.md updated for consistency; no operational impact.
v1.1.9
Version 1.1.9 → 1.4.0
- Added new `onboard` sub-skill for wallet setup/readiness checks, including secret validation, funding, trustline, and swap guidance.
- Updated documentation (`SKILL.md`) to reflect the new onboarding flow and step-by-step usage on a fresh machine.
- Refined and clarified sub-skill naming and triggers (e.g., `check-balance`, `discover`).
- Added supporting scripts for onboarding and balance checks.
- Created new `prepare.mjs` build/dependency script and included `package-lock.json` for reproducibility.
v1.1.8
- Lowered the mainnet spending confirmation threshold from $1.00 to $0.10.
- `pay-per-call` now auto-approves micropayments up to $0.10; payments above prompt for confirmation.
- Updated documentation to reflect the new confirmation behavior and clarify default thresholds.
v1.1.7
- Version bump from 1.1.6 to 1.1.7.
- Improved documentation: clearer explanation of secret handling guarantees and strict scoping of signing keys.
- Explicit section listing all network endpoints the skill may contact and their purposes.
- No code changes detected; update consists of documentation and metadata improvements.
v1.1.6
No code or functional changes. Documentation has been updated for clarity and formatting.
- Improved security notice for clarity and readability.
- Made instructions, usage notes, and warnings easier to scan.
- Reformatted and condensed key sections of the README.
- No changes to code or behavior.
v1.1.4
- Migrated all sub-skills from the `commands/` folder to `skills/` for improved organization and clarity.
- Updated metadata: new author, version bump, homepage, and repository links; dependencies list updated (removed unused, listed only necessary packages).
- Adjusted sub-skill references in documentation to reflect new paths.
- No changes to core wallet functionality or sub-skill capabilities.
- Improved and clarified package documentation in SKILL.md.
v1.0.3
Stellar-agent-agent-wallet 1.0.3 improves secret key management and CLI configuration:
- Secret keys are now stored in a file (`.stellar-secret`), not environment variables. Use `scripts/generate-keypair.ts` to generate and manage wallet keys.
- Sensitive secrets are never printed to stdout; the file-based approach matches common wallet security practices.
- All CLI commands now accept `--secret-file` and `--network` flags for configuration, and environment variable handling has been removed.
- Updated documentation reflecting the switch from environment-variable to file-based secret management.
- Added a `scripts/src/cli-config.ts` helper to support the new CLI options. Removed obsolete `env.example.txt`.
v1.0.2
Version 1.0.2
- Added standalone scripts for protocol handling: MPP envelope, x402, Stellar signer, Rozo client, pay engine, and secret management.
- Deprecated and removed template files previously used for code generation.
- Added an example `.env` file for easier configuration setup.
- Updated environment config: removed unused variables (MPP_ROUTER_URL, ROZO_INTENT_URL).
- No functional API changes; internal refactor improves modularity and clarity.
v1.0.1
stellar-agent-wallet 1.0.1
- Skill name corrected to "stellar-agent-wallet" for consistency.
- Version updated to 1.0.1.
- Added detailed metadata in SKILL.md: SPDX license (MIT), runtime dependencies, required/optional environment variables, and network endpoints.
- Explicit security warnings in the documentation about wallet use, private key handling, and default mainnet.
- Listed commands requiring user spending confirmation and thresholds.
- No code changes in files; SKILL.md reflects the only updates.
v1.0.0
Initial release of stellar-agentic-wallet: a modular Stellar USDC wallet skill for AI agents.
- Enables agents to pay for 402-gated APIs, check balances, manage USDC trustlines, swap XLM→USDC, and bridge/send USDC cross-chain via Rozo.
- Organized as a router over five focused sub-skills: stellar-balance, discover-mpprouter, pay-per-call, send-payment, and bridge.
- Supports both testnet and mainnet, operates in client-only and sponsored modes.
- Allows cross-chain USDC transfers to Ethereum, Arbitrum, Base, BSC, Polygon, Solana, or back to Stellar.
- Triggers on relevant wallet/payment/bridge requests or payment intent from the user.
元数据
常见问题
Stellar Agentic Wallet 是什么？
A Stellar USDC wallet skill for AI agents. Pay for 402-gated APIs via MPP Router or x402 facilitators, check balances, manage USDC trustlines, swap XLM→USDC... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 163 次。
如何安装 Stellar Agentic Wallet？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stellar-agentic-wallet」即可一键安装，无需额外配置。
Stellar Agentic Wallet 是免费的吗？
是的，Stellar Agentic Wallet 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Stellar Agentic Wallet 支持哪些平台？
Stellar Agentic Wallet 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Stellar Agentic Wallet？
由 Shawn Muggle（@shawnmuggle）开发并维护，当前版本 v1.7.0。
推荐 Skills