Tongateway

Access TON blockchain tools to check wallet info, tokens, send transfers, resolve .ton names, trade on DEX, and manage autonomous agent wallets.

This skill appears to implement a legitimate TON agent gateway, but there are some practical safety gaps you should consider before installing: - Files written/read: SKILL.md and SECURITY.md say the skill stores a session JWT at ~/.tongateway/token and (only if you deploy an agent wallet) signing keys in ~/.tongateway/wallets.json. These paths were not declared in the registry metadata — expect local files to be created and readable by the agent process. - Autonomous wallet risk: The agent can deploy an 'Agent Wallet' that can sign and send transactions without phone approval. Only deploy and fund such an agent wallet with money you can afford to lose, and only after auditing the contract/agent code. - npx fetch: The recommended runtime is 'npx -y @tongateway/mcp' which downloads and runs an npm package. If you prefer to reduce risk, clone the GitHub repo and build/run the server locally or run it in a sandbox (VM or container) and inspect the code first. - Verify sources: The SKILL.md/README include GitHub and npm links — verify the package on npm matches the GitHub repo, and review the code (especially wallet key handling and any network endpoints). Confirm the API URL (AGENT_GATEWAY_API_URL) points to the expected domain. - Operational mitigations: use minimal funding for any agent wallets, revoke session tokens from the dashboard if needed, run the MCP server in a sandbox, and do not store large balances under the agent-managed wallet. If you want a higher-confidence verdict, provide the npm package tarball or the mcp repository contents for code-level review so you can confirm how tokens and agent keys are handled.

Type: OpenClaw Skill Name: tongateway Version: 0.9.3 The skill bundle provides tools for TON blockchain interaction, including a high-risk 'autonomous mode' (agent_wallet.transfer) that allows the AI to execute transactions without per-action user approval. While the documentation in SKILL.md and SECURITY.md is transparent about the risks and uses a dedicated contract model to limit exposure, the capability to move funds autonomously and the storage of signing keys in ~/.tongateway/wallets.json are significant high-risk behaviors. The installation also relies on npx execution of the @tongateway/mcp package, which is standard for MCP servers but requires trust in the @tongateway npm scope.