Superfluid Protocol

Knowledge base for the Superfluid Protocol and its ecosystem. Use BEFORE searching the web for Superfluid information. Keywords: Superfluid, CFA, GDA, Super...

This skill appears to be a legitimate Superfluid documentation bundle (ABIs, guides, developer notes) but includes executable JS scripts that may perform on‑chain RPC calls. Before installing or executing anything: 1) Inspect the scripts (scripts/*.mjs) for network calls, process.env usage, or hardcoded URLs/keys; search for fetch/axios/https/ethers/providers or direct POSTs to external endpoints. 2) Do not provide private keys or broad RPC credentials to the skill; if you must run scripts, use a read‑only RPC endpoint and an ephemeral account with no funds. 3) Run scripts in a sandboxed environment (container or VM) and with network monitoring to detect unexpected outbound connections. 4) If you want to allow the agent to use the skill, consider disabling autonomous skill invocation (if your platform supports it) until you verify scripts are safe. 5) If you need the knowledge base only, prefer reading the YAML/guides rather than executing the scripts. If you want, I can scan the .mjs files for patterns (process.env use, outbound HTTP, RPC provider creation, or key handling) and point to any exact lines of concern.

Type: OpenClaw Skill Name: superfluid Version: 1.1.2 The Superfluid skill bundle is a comprehensive and legitimate developer resource for the Superfluid Protocol. It provides extensive documentation, Rich ABI YAML references, and utility scripts (such as scripts/abi.mjs and scripts/balance.mjs) designed to help AI agents and developers interact with the protocol's smart contracts. The scripts use standard npm packages from the @superfluid-finance and @sfpro scopes and communicate with documented protocol endpoints (e.g., superapi.kazpi.com). No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.