← 返回 Skills 市场
1277
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install usd1transaction
功能描述
Securely transfer USD1 (USDC on Wormhole) between wallets using Wormhole Liquidity Facility on Testnet by default.
安全使用建议
This skill appears to implement a testnet USDC transfer using the Wormhole SDK and will ask you to provide a wallet private key at runtime. Before installing or using it: (1) do NOT supply a real/production private key — use a throwaway testnet wallet only; (2) review the bundled code and dependencies yourself or have a maintainer you trust audit them (package-lock includes many transitive packages and some deprecation notes); (3) prefer designs that use delegated signing (e.g., signing service, hardware wallet, or ephemeral key signing) rather than handing raw private keys to a skill; (4) verify the skill author and source (there is no homepage or author metadata here). If you must test it, create a testnet wallet with minimal funds and monitor transactions closely.
功能分析
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
Suspicious High-Entropy/Eval files: 1
The skill is classified as suspicious due to its direct handling of a user-provided private key for initiating cryptocurrency transfers. While this capability is explicitly declared in `SKILL.md` and implemented as the core function in `index.js`, the inherent high risk associated with processing sensitive credentials like private keys warrants a 'suspicious' classification, even without clear evidence of intentional malicious exfiltration or unauthorized use beyond the stated purpose. The skill defaults to Testnet, which is a positive security practice, and there are no signs of prompt injection, obfuscation, or malicious dependencies.
能力评估
Purpose & Capability
The SKILL.md and index.js align: both describe transferring USD1/USDC over Wormhole Testnet and the code uses @wormhole-foundation SDK to perform a token transfer. However the registry metadata lacks a public description, homepage, or author — reducing provenance and making it harder to trust the publisher.
Instruction Scope
The runtime instructions and code require the user's wallet privateKey as an input parameter (required). That is coherent for a transfer skill, but it means the agent runtime will receive a raw private key. SKILL.md cautions to use secure input and Testnet only, which is good, but the instructions give the agent direct access to a secret that controls funds — a significant risk if the agent environment or skill execution is compromised.
Install Mechanism
There is no install spec (instruction-only style) but the package.json/package-lock are bundled and list @wormhole-foundation SDK dependencies and many transitive packages. No external arbitrary download URLs are used. The large dependency tree increases surface area and includes components (in package-lock) with deprecation/security notes, which should be audited before running.
Credentials
The skill does not request environment variables or platform credentials — instead it requires a privateKey passed at runtime. While necessary for signing a transaction, asking for a raw private key is high privilege: it grants full control of the wallet. The registry does not declare a primary credential or explain secure handling/storage of the key beyond the SKILL.md note. This is proportionate to the stated functionality but requires strong operational safeguards (use testnet only, ephemeral keys, or a signing service/hardware wallet).
Persistence & Privilege
The skill does not request always:true and does not modify system or other skills' configuration. Model invocation is allowed (default), which is normal. There is no evidence it attempts to persist credentials or change agent configuration autonomously.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install usd1transaction - 安装完成后，直接呼叫该 Skill 的名称或使用
/usd1transaction触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of USD1 WLF Transfer Skill.
- Enables secure transfer of USD1 (USDC on Wormhole) between wallets via Wormhole Liquidity Facility.
- Supports Testnet by default for safer testing.
- Allows balance checking, transaction sending, and returns transaction hash, status, and detailed messages.
- Requires sender’s private key and recipient address as input.
- Emphasizes secure handling of private keys and testnet-only usage until production.
元数据
常见问题
USD1 Transaction 是什么？
Securely transfer USD1 (USDC on Wormhole) between wallets using Wormhole Liquidity Facility on Testnet by default. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1277 次。
如何安装 USD1 Transaction？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install usd1transaction」即可一键安装，无需额外配置。
USD1 Transaction 是免费的吗？
是的，USD1 Transaction 完全免费（开源免费），可自由下载、安装和使用。
USD1 Transaction 支持哪些平台？
USD1 Transaction 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 USD1 Transaction？
由 AsgherAli（@asgherali）开发并维护，当前版本 v1.0.0。
推荐 Skills