← 返回 Skills 市场
mscandlen3

Use Modular Wallets

作者 Madelyn · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
228
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install use-modular-wallets
功能描述
Build crypto wallets using Circle Modular Wallets SDK with passkey authentication, gasless transactions, and extensible module architecture. Use when: creati...
安全使用建议
This skill appears to be a legitimate, developer-focused guide for Circle Modular Wallets, but take precautions before using it: (1) The registry metadata omitted required env vars — you will need to provide a Circle client key and client URL (sensitive). Do not commit these to source; use a secrets manager and .gitignore .env files. (2) Examples persist passkey credentials and mnemonics to localStorage for convenience — that is unsafe in production. Use httpOnly cookies or secure storage and never store mnemonics in the repo or browser storage without encryption. (3) Confirm the skill's origin (source/homepage is unknown) and cross-check the code snippets against the official Circle SDK repository and docs. (4) Understand who pays gas (paymaster:true) before sending transactions and never auto-execute transfers on mainnet — test on supported testnets first. If you need higher assurance, ask the publisher for a homepage or source repo and request that required environment variables be listed in the skill metadata.
功能分析
Type: OpenClaw Skill Name: use-modular-wallets Version: 0.1.0 The skill bundle provides legitimate integration instructions and reference code for the Circle Modular Wallets SDK, focusing on account abstraction (ERC-4337) and passkey authentication. It includes explicit security rules and best practices in SKILL.md, such as warning against hardcoding secrets, requiring user confirmation for transactions, and advising against the use of localStorage for sensitive credentials in production. The code in references/circle-smart-account.md and references/passkey-recovery.md aligns with standard SDK usage and lacks any indicators of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The name and description match the SKILL.md and reference files: the content genuinely documents building Circle Modular Wallets (passkeys, gasless transactions, batching, recovery). There are no unrelated capabilities or unexpected third‑party services referenced beyond Circle and standard npm packages.
Instruction Scope
The runtime instructions stay within the wallet-building scope (register/login passkeys, create smart accounts, send userOperations, recovery flows). They reference storing credentials and mnemonics and instruct npm installs. They do not request access to unrelated system files or other services. However the examples persist P256Credential and recovery mnemonics to localStorage (explicitly labeled 'example only'), which is insecure in production and worth flagging.
Install Mechanism
This is instruction-only (no install spec). It recommends installing well-known npm packages (@circle-fin/modular-wallets-core, viem, bip39) — a low-to-moderate risk developer dependency pattern. No downloads from arbitrary URLs or extract operations are requested.
Credentials
The registry metadata declares no required environment variables, yet SKILL.md and references clearly require client keys/URLs (CLIENT_KEY/CLIENT_URL or VITE_CLIENT_KEY/VITE_CLIENT_URL). Those are sensitive (app identification/credentials to Circle) and should have been declared as required. The skill also instructs handling of recovery mnemonics and persisting passkey credentials in examples — both sensitive operations that require strong guidance and secure storage. The mismatch between declared requirements and actual needed secrets is a coherence problem and a security concern.
Persistence & Privilege
The skill is not force-included (always:false), does not request system-wide config changes, and is instruction-only (no code that would persist itself). There is no evidence it modifies other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install use-modular-wallets
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /use-modular-wallets 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of the use-modular-wallets skill. - Enables building crypto wallets using Circle Modular Wallets SDK. - Supports passkey (WebAuthn) authentication, gasless transactions via paymaster, and modular smart contract accounts (MSCAs). - Allows batch transactions, passkey recovery with BIP-39, and extensible onchain wallet modules. - Enforces strict security rules against hardcoding or mishandling keys, credentials, and recovery phrases. - Includes comprehensive setup instructions, supported chains, and core conceptual guidance. - Provides best practices and reference links for secure and correct implementation.
元数据
Slug use-modular-wallets
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Use Modular Wallets 是什么?

Build crypto wallets using Circle Modular Wallets SDK with passkey authentication, gasless transactions, and extensible module architecture. Use when: creati... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 228 次。

如何安装 Use Modular Wallets?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install use-modular-wallets」即可一键安装,无需额外配置。

Use Modular Wallets 是免费的吗?

是的,Use Modular Wallets 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Use Modular Wallets 支持哪些平台?

Use Modular Wallets 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Use Modular Wallets?

由 Madelyn(@mscandlen3)开发并维护,当前版本 v0.1.0。

💬 留言讨论